← All credits

Juho Nurminen of Mattermost

13 vulnerability records and advisories credit this contributor.

Stack exhaustion due to deeply nested types in go/parser

Comments in display names are incorrectly handled in net/mail

Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

Arbitrary code execution via go.mod toolchain directive in cmd/go

Code injection via go command with cgo in cmd/go

Improper handling of empty HTML attributes in html/template

Improper handling of JavaScript whitespace in html/template

Improper sanitization of CSS values in html/template

Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go

Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go