HIGH7.5
GO-2025-4009
Quadratic complexity when parsing some invalid inputs in encoding/pem
Quick fix
GO-2025-4009 — stdlib: upgrade to the fixed version with the command below.
go get stdlib@v1.24.8Details
The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input.
This affects programs which parse untrusted PEM inputs.
Are you affected?
Enter the version of the package you're using.