Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2020-36564: GO-2020-0049 - Go Packages

Due to improper validation of caller input, validation is silently disabled if the provided expected token is malformed, causing any user supplied token to be considered valid.

CVE
  • Why Go

    • Common problems companies solve with Go

    • Stories about how and why companies use Go

    • How Go can help keep you secure by default

  • Learn

  • Docs

    • Tips for writing clear, performant, and idiomatic Go code

    • A complete introduction to building software with Go

    • Reference documentation for Go’s standard library

    • Learn what’s new in each Go release

  • Packages

  • Community

    • Videos from prior events

    • Meet other local Go developers

    • Learn and network with Go developers from around the world

    • The Go project’s official blog.

    • Get help and stay informed from Go

    • Get connected

Related news

GHSA-5x84-q523-vvwr: nosurf vulnerable to improper input validation

Due to improper validation of caller input, validation is silently disabled if the provided expected token is malformed, causing any user supplied token to be considered valid.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda