USN-8883-1: Go vulnerability
AI Summary
It was discovered that the Go x/net/idna package incorrectly handled certain Punycode-encoded labels that decoded to ASCII-only labels. An attacker could possibly use this issue to bypass hostname-based access controls and escalate privileges.
Discussion
Sign in to join the discussion.
Loading comments…