stdlib vulnerabilities
CVEs whose affected-version data names the stdlib package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
34 CVEsRSS
CVE-2022-41715NoneMemory exhaustion when compiling regular expressions in regexp/syntax
Memory exhaustion when compiling regular expressions in regexp/syntax
▾ Sunlitstdlib · stdlibEPSS 1.7%via OSV
CVE-2022-2880NoneIncorrect sanitization of forwarded query parameters in net/http/httputil
Incorrect sanitization of forwarded query parameters in net/http/httputil
▾ Sunlitstdlib · stdlibEPSS 1.4%via OSV
CVE-2022-2879NoneUnbounded memory consumption when reading headers in archive/tar
Unbounded memory consumption when reading headers in archive/tar
▾ Sunlitstdlib · stdlibEPSS 2.0%via OSV
CVE-2022-32190NoneFailure to strip relative path components in net/url
Failure to strip relative path components in net/url
▾ Sunlitstdlib · stdlibEPSS 2.2%via OSV