An open index of dependabot pull requests across open source projects.

golang.org/x/net

Ecosystem:
go
Package URL:
pkg:golang/golang.org/x/net
Total PRs:
15,972 Dependabot PRs
Latest PR:
2 days ago
Unique Repositories:
7,707 repositories
Unique Repos (30 days):
80 repositories
Security Advisories
golang.org/x/net vulnerable to Uncontrolled Resource Consumption
GHSA-vvpx-j8f3-3w6h CVE-2022-41723 HIGH published over 3 years ago • updated 2 months ago
A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a smal...
HTTP/2 Stream Cancellation Attack
GHSA-qppj-fm5r-hxr3 CVE-2023-44487 MODERATE published almost 3 years ago • updated about 7 hours ago
## HTTP/2 Rapid reset attack The HTTP/2 protocol allows clients to indicate to the server that a previous stream should be canceled by sending a RS...
golang.org/x/net/http2/h2c vulnerable to request smuggling attack
GHSA-fxg5-wq6x-vr4w CVE-2022-41721 HIGH published over 3 years ago • updated 2 days ago
A request smuggling attack is possible when using MaxBytesHandler. When using MaxBytesHandler, the body of an HTTP request is not fully consumed. W...
golang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion
GHSA-h86h-8ppg-mxmh CVE-2021-31525 MODERATE published over 4 years ago • updated 3 days ago
golang.org/x/net/http/httpguts in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a lar...
HTTP/2 rapid reset can cause excessive work in net/http
GHSA-4374-p667-p6c8 CVE-2023-39325 HIGH published almost 3 years ago • updated 5 days ago
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the tot...
Recent PRs
Package Details
Name: golang.org/x/net
Ecosystem: go
PURL Type: golang
Package URL: pkg:golang/golang.org/x/net
JSON API: View JSON
Security Advisories

19

Active advisories
HIGH 13
MODERATE 6
View All golang Advisories
Package Information
Description:

Homepage: https://cs.opensource.google/go/x/net
Latest Release: v0.40.0
over 1 year ago
Dependent Repos: 276,704
Dependent Packages: 112,044
Ranking: Top 0.0005% by dependent repos Top 0.0002% by dependent pkgs
PR Status
Open 6,528 (40.9%)
Merged 3,032 (19.0%)
Closed 4,710 (29.5%)
PR Types
Minor 14,264 (89.3%)
Patch 1 (0.0%)