HIGH7.5
GO-2021-0172
Denial of service when parsing large forms in mime/multipart
Quick fix
GO-2021-0172 — stdlib: upgrade to the fixed version with the command below.
go get stdlib@v1.6.4Details
When parsing large multipart/form-data, an attacker can cause a HTTP server to open a large number of file descriptors. This may be used as a denial-of-service vector.
Are you affected?
Enter the version of the package you're using.