The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduct HTTP request smuggling attacks via a request with two Content-length headers.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Sep 20, 2017 | Aug 14, 2015 |
| Centos_linux | — | Upgrade golangUpgrade golang-binUpgrade golang-testsUpgrade golang-miscUpgrade golang-docsUpgrade golang-src | Oct 19, 2017 | Aug 24, 2015 |
| Freebsd | — | Upgrade goUpgrade go14 | Dec 10, 2025 | Aug 25, 2015 |
| Redhat_linux | — | Upgrade golang-miscUpgrade golang-docsUpgrade golang-binUpgrade golang-testsUpgrade golangUpgrade golang-src | Oct 21, 2016 | Aug 24, 2015 |
| Suse | — | Upgrade go-debuginfoUpgrade go-debugsourceUpgrade goUpgrade go-doc | Jul 28, 2016 | Aug 24, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub