| module: std | |
| package: net/http | |
| versions: | |
| - fixed: go1.13.13 | |
| - fixed: go1.14.5 | |
| description: | | |
| A Go HTTP server which reads from the request body while | |
| simultaneously writing a response can panic when clients | |
| send a "Expect: 100-continue" header. | |
| cves: | |
| - CVE-2020-15586 | |
| credit: Mikael Manukyan | |
| symbols: | |
| - expectContinueReader.Read | |
| links: | |
| pr: https://go.dev/cl/242598 | |
| commit: https://go.googlesource.com/go/+/fa98f46741f818913a8c11b877520a548715131f | |
| context: | |
| - https://go.dev/issue/34902 |