HIGH7.5
GO-2022-0537
Panic when decoding Float and Rat types in math/big
Quick fix
GO-2022-0537 — stdlib: upgrade to the fixed version with the command below.
go get stdlib@v1.17.13Details
Decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service.
Are you affected?
Enter the version of the package you're using.