~ / search / GHSA-hggr-p7v6-73p5

GHSA-hggr-p7v6-73p5

revel is vulnerable to resource exhaustion

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-36568

Packages

EcosystemPackageAffectedFixed in
Go github.com/revel/revel < 1.0.0 1.0.0

Details

As written in the advisory (Markdown source, shown as plain text).

Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation.

References

External links from the advisory. They lead to third-party sites.