| Package | Affected versions | Patched versions |
|---|---|---|
| stdlib | ≥ 1.18.0-0, < 1.18.4< 1.17.12 | 1.18.41.17.12 |
| go | ≥ 1.18.0, < 1.18.4< 1.17.12 | 1.18.41.17.12 |
The HTTP/1 client accepted some invalid Transfer-Encoding headers as indicating a "chunked" encoding. This could potentially allow for request smuggling, but only if combined with an intermediate server that also improperly failed to reject the header as invalid.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free