PT-2025-45813 · Go · Stdlib
Published
2025-10-29
·
Updated
2025-10-29
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information (the ALPN protocols sent by the client) which is not escaped.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Stdlib