| Package | Affected versions | Patched versions |
|---|---|---|
| go | = 1.11.5 | |
| developer tools | = 1.0 |
An issue was discovered in net/http in Go 1.11.5. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the second argument to http.NewRequest with \r\n followed by an HTTP header or a Redis command.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free