| low |
Attacker-controlled ctx objects retained by bounded queue NewFunc |
stackless/func.go |
–
|
| low |
Missing validation of newWriter and returned underlying writer can cause nil interface panics NewWriter |
stackless/writer.go |
–
|
| low |
Error path can retain pooled output buffer and allow unbounded growth (*writer).do |
stackless/writer.go |
–
|
| low |
Abandoned reader can leave stream writer blocked indefinitely NewStreamReader |
stream.go |
–
|
| low |
int64 to int truncation of prefetched buffer size requestStream.Read |
streaming.go |
–
|
| low |
Unchecked accumulation in totalBytesRead can overflow length accounting requestStream.Read |
streaming.go |
–
|
| low |
Background DNS cache cleaner goroutine never terminates (goroutine leak) tcpAddrsClean |
tcpdialer.go |
–
|
| low |
TOCTOU race in getTCPAddrs causes redundant resolution and orphaned cache entries getTCPAddrs |
tcpdialer.go |
–
|
| low |
Unchecked CloseOnExec error can leave listener fd inheritable across exec newSocketCloexecOld |
tcplisten/socket.go |
–
|
| low |
F_SETFD error can be masked and return a socket without FD_CLOEXEC newSocketCloexec |
tcplisten/socket_zos_s390x.go |
–
|
| low |
FcntlInt is called on an invalid fd when socket creation fails newSocketCloexec |
tcplisten/socket_zos_s390x.go |
–
|
| low |
Positive Backlog can be truncated in listen(2) on 64-bit platforms (*Config).fdSetup |
tcplisten/tcplisten.go |
–
|
| low |
Integer overflow in maxAckBacklog on 32-bit when size is 32 maxAckBacklog |
tcplisten/tcplisten_linux.go |
–
|
| low |
kernelVersion can overflow or misparse malformed uname.Release kernelVersion |
tcplisten/tcplisten_linux.go |
–
|
| low |
Unbounded read of /proc/sys/net/core/somaxconn soMaxConn |
tcplisten/tcplisten_linux.go |
–
|
| low |
Possible TCP Fast Open socket-option misuse enableFastOpen |
tcplisten/tcplisten_linux.go |
–
|
| low |
Unchecked interface type assertion in AcquireTimer AcquireTimer |
timer.go |
–
|
| low |
initTimer can panic if a pooled timer is still active initTimer |
timer.go |
–
|
| low |
AcquireTimer does not validate timeout duration AcquireTimer |
timer.go |
–
|
| low |
Unvalidated host input allows unbounded certificate material and nonconforming SANs GenerateTestCertificate |
tls.go |
–
|
| low |
Expensive RSA-2048 key generation on every call is a DoS surface GenerateTestCertificate |
tls.go |
–
|
| low |
Invalid certificate PEM is returned when x509.CreateCertificate fails GenerateTestCertificate |
tls.go |
–
|
| low |
Windows backslash dot-segment normalization can produce non-canonical paths normalizePath |
uri.go |
–
|
| low |
UpdateBytes leaves inconsistent URI state on parse failure updateBytes |
uri.go |
–
|
| low |
Raw dot segments can be emitted when path normalization is disabled RequestURI |
uri.go |
–
|
| low |
Setters bypass URI validation used by Parse SetHostBytes/SetPathBytes/SetQueryStringBytes/SetHashBytes |
uri.go |
–
|
| low |
Host port validation accepts unbounded numeric port length validOptionalPort |
uri.go |
–
|
| low |
Windows drive-path heuristic can bypass leading-slash normalization addLeadingSlash |
uri_windows.go |
–
|
| low |
Replacing or clearing a Closer user value without closing it Set() |
userdata.go |
–
|
| low |
Unbounded user-value storage and linear lookup Set() |
userdata.go |
–
|
| low |
Unchecked nil WorkerFunc, connState, and Logger callbacks workerFunc |
workerpool.go |
–
|
| low |
Stop/Start lifecycle leaves mustStop and workersCount stale Start / Stop |
workerpool.go |
–
|
| low |
Stop does not interrupt busy workers Stop |
workerpool.go |
–
|
| low |
Data race on stopCh and workerChanPool.New during concurrent lifecycle calls Start / Stop |
workerpool.go |
–
|
| low |
Missing io.Writer validation can panic with nil or typed-nil writers WriteZstdLevel/WriteUnzstd |
zstd.go |
–
|
| low |
Zstd encoder write errors are ignored on fast-path compression WriteZstdLevel |
zstd.go |
–
|
| info |
parseIPv4Octet 'parsed' field can overflow on 32-bit with long leading-zero input parseIPv4Octet |
bytesconv.go |
–
|