PT-2022-28296 · Go · Stdlib

Published 2022-01-05 · Updated 2022-01-05

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned.

Description The issue concerns the MIME header parser, where it treats spaces and hyphens as equivalent. This can lead to HTTP request smuggling.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GO-2021-0157

Affected Products

Stdlib

References · 5

• https://osv.dev/vulnerability/GO-2021-0157 · Vendor Advisory
• https://go.googlesource.com/go/+/117ddcb83d7f42d6aa72241240af99ded81118e9 · Note
• https://groups.google.com/g/golang-announce/c/iSIyW4lM4hY/m/ADuQR4DiDwAJ · Note
• https://go.dev/issue/53035 · Note
• https://go.dev/cl/11772 · Note