Gohttp Project: Security Vulnerabilities
In GoHttp through 2017-07-25, there is a stack-based buffer over-read via a long User-Agent header.
CVSS Score
7.5
EPSS Score
0.003
Published
2019-05-20
GoHTTP through 2017-07-25 has a GetExtension heap-based buffer overflow via a long extension.
CVSS Score
9.8
EPSS Score
0.005
Published
2019-05-17
GoHTTP through 2017-07-25 has a stack-based buffer over-read in the scan function (when called from getRequestType) via a long URL.
CVSS Score
7.5
EPSS Score
0.003
Published
2019-05-17
GoHTTP through 2017-07-25 has a sendHeader use-after-free.
CVSS Score
9.8
EPSS Score
0.005
Published
2019-05-17