1- ignored-vulnerabilities : []
1+ ignored-vulnerabilities :
2+ # Panic when validating certificates with DSA public keys in crypto/x509
3+ # Found in: crypto/[email protected] 4+ # Fixed in: crypto/[email protected] 5+ - id : GO-2025-4013
6+ info : https://pkg.go.dev/vuln/GO-2025-4013
7+ silence-until : 2025-12-03
8+ # Lack of limit when parsing cookies can cause memory exhaustion in net/http
9+ 10+ 11+ - id : GO-2025-4012
12+ info : https://pkg.go.dev/vuln/GO-2025-4012
13+ silence-until : 2025-12-03
14+ # Parsing DER payload can cause memory exhaustion in encoding/asn1
15+ # Found in: encoding/[email protected] 16+ # Fixed in: encoding/[email protected] 17+ - id : GO-2025-4011
18+ info : https://pkg.go.dev/vuln/GO-2025-4011
19+ silence-until : 2025-12-03
20+ # Insufficient validation of bracketed IPv6 hostnames in net/url
21+ 22+ 23+ - id : GO-2025-4010
24+ info : https://pkg.go.dev/vuln/GO-2025-4010
25+ silence-until : 2025-12-03
26+ # Quadratic complexity when parsing some invalid inputs in encoding/pem
27+ # Found in: encoding/[email protected] 28+ # Fixed in: encoding/[email protected] 29+ - id : GO-2025-4009
30+ info : https://pkg.go.dev/vuln/GO-2025-4009
31+ silence-until : 2025-12-03
32+ # ALPN negotiation error contains attacker controlled information in crypto/tls
33+ # Found in: crypto/[email protected] 34+ # Fixed in: crypto/[email protected] 35+ - id : GO-2025-4008
36+ info : https://pkg.go.dev/vuln/GO-2025-4008
37+ silence-until : 2025-12-03
38+ # Quadratic complexity when checking name constraints in crypto/x509
39+ # Found in: crypto/[email protected] 40+ # Fixed in: crypto/[email protected] 41+ - id : GO-2025-4007
42+ info : https://pkg.go.dev/vuln/GO-2025-4007
43+ silence-until : 2025-12-03
0 commit comments