revel is vulnerable to resource exhaustion

HIGH 7.5CVE-2020-36568 · GHSA-hggr-p7v6-73p5 · GO-2020-0003 · Published 27/12/2022 · updated 17/06/2026

In short

CVE-2020-36568 is a HIGH (CVSS 7.5) vulnerability affecting github.com/revel/revel, revel (revel).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.4% of all vulnerabilities.
Fix: update to 1.0.0 or later.

Package	Affected versions	Patched versions
github.com/revel/revel Go	`< 1.0.0`	`1.0.0`
revel revel	`< 1.0.0`	`1.0.0`

Description

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation.

NVD description

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation.

References

nvd.nist.gov/vuln/detail/CVE-2020-36568 · ADVISORY
revel/revel · WEB
revel/revel#1427 · WEB
revel/revel commit d160ecb · WEB
revel/revel · PACKAGE
pkg.go.dev/vuln/GO-2020-0003 · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free