Invoking Encrypted Client Hello privacy leak in crypto/tls

Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go

ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil

Handshake messages may be processed at the incorrect encryption level in crypto/tls

Excessive CPU consumption in Reader.ReadResponse in net/textproto

Parsing DER payload can cause memory exhaustion in encoding/asn1

Insufficient validation of bracketed IPv6 hostnames in net/url

ALPN negotiation error contains attacker controlled information in crypto/tls

A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body

On Windows, The IsLocal function does not correctly detect reserved device names in some cases

Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures

The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the…

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment

In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary…

In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the VerifyOptions.KeyUsages EKU requirements (if VerifyOptions.Roots equals nil and the…

Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous closing of file…

Improper access to parent directory of root in os

Session tickets lack random ticket_age_add in crypto/tls

FileInfo can escape from a Root in os

crpyto/tls in Go 1.1 before 1.3.2, when SessionTicketsDisabled is enabled, allows man-in-the-middle attackers to spoof clients via unspecified vectors