~ / search / GHSA-p6fg-723f-hgpw

GHSA-p6fg-723f-hgpw

shiyanhui/dht vulnerable to Uncontrolled Resource Consumption

Source: GitHub Advisory Database (reviewed) High CVE-2020-36562

Packages

EcosystemPackageAffectedFixed in
Go github.com/shiyanhui/dht <= 0.0.0-20201219151056-5a20f3199263 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Due to unchecked type assertions, maliciously crafted messages can cause panics, which may be used as a denial of service vector.

References

External links from the advisory. They lead to third-party sites.