The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduct HTTP request smuggling attacks via a request that contains Content-Length and Transfer-Encoding header fields.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Sep 20, 2017 | Aug 14, 2015 |
| Centos_linux | — | Upgrade golang-binUpgrade golang-testsUpgrade golang-docsUpgrade golang-miscUpgrade golangUpgrade golang-src | Oct 19, 2017 | Aug 24, 2015 |
| Freebsd | — | Upgrade go14Upgrade go | Dec 10, 2025 | Aug 25, 2015 |
| Redhat_linux | — | Upgrade golang-binUpgrade golang-srcUpgrade golang-testsUpgrade golang-miscUpgrade golangUpgrade golang-docs | Oct 21, 2016 | Aug 24, 2015 |
| Suse | — | Upgrade go-debugsourceUpgrade go-debuginfoUpgrade goUpgrade go-doc | Jul 28, 2016 | Aug 24, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub