Improper access control in github.com/gorilla/handlers
Published Dec 27, 2022
9.8
CRITICALCVSS 3.1
EPSS 0.70%
Description
Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the expected behavior of the Same Origin Policy.
Affected products
-
- Version 0StatusaffectedConstraints<1.3.0
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Github.com/gorilla/handlers | Github.com/gorilla/handlers | unaffected |
|
- < 1.3.0
No data.
Logging Subsystem for Red Hat OpenShift
openshift-logging/logging-loki-rhel9
Not affected
Migration Toolkit for Containers
rhmtc/openshift-migration-registry-rhel8
Not affected
OpenShift API for Data Protection
oadp/oadp-registry-rhel8
Not affected
OpenShift API for Data Protection
oadp/oadp-velero-plugin-rhel9
Not affected
OpenShift Developer Tools and Services
helm
Not affected
OpenShift Developer Tools and Services
jenkins-operator-container
Not affected
OpenShift Serverless
openshift-serverless-1-knative-client-plugin-event-sender-rhel8-container
Not affected
OpenShift Serverless
openshift-serverless-1/client-kn-rhel8
Not affected
OpenShift Serverless
openshift-serverless-1/ingress-rhel8-operator
Not affected
Red Hat 3scale API Management Platform 2
3scale-operator-container
Not affected
Red Hat Advanced Cluster Management for Kubernetes 2
acm-multicluster-globalhub-agent-container
Not affected
Red Hat Advanced Cluster Management for Kubernetes 2
rhacm2/acm-cluster-proxy-rhel8
Not affected
Red Hat Advanced Cluster Management for Kubernetes 2
rhacm2/acm-governance-policy-addon-controller-rhel9
Not affected
Red Hat Advanced Cluster Management for Kubernetes 2
rhacm2/acm-grafana-rhel8
Not affected
Red Hat Advanced Cluster Management for Kubernetes 2
rhacm2/acm-prometheus-rhel9
Not affected
Red Hat Advanced Cluster Management for Kubernetes 2
rhacm2/acm-search-v2-rhel9
Not affected
Red Hat Advanced Cluster Management for Kubernetes 2
rhacm2/acm-volsync-addon-controller-rhel9
Not affected
Red Hat Advanced Cluster Management for Kubernetes 2
rhacm2/multicluster-operators-application-rhel8
Not affected
Red Hat Advanced Cluster Management for Kubernetes 2
rhacm2/multicluster-operators-channel-rhel9
Not affected
Red Hat Advanced Cluster Management for Kubernetes 2
rhacm2/multicluster-operators-subscription-rhel8
Not affected
Red Hat Advanced Cluster Management for Kubernetes 2
rhacm2/multiclusterhub-repo-rhel8
Not affected
Red Hat Advanced Cluster Management for Kubernetes 2
rhacm2/multiclusterhub-rhel8
Not affected
Red Hat Advanced Cluster Management for Kubernetes 2
rhacm2/observatorium-rhel8
Not affected
Red Hat Advanced Cluster Management for Kubernetes 2
rhacm2/prometheus-rhel8
Not affected
Red Hat Advanced Cluster Management for Kubernetes 2
rhacm2/rbac-query-proxy-rhel8
Not affected
Red Hat Advanced Cluster Management for Kubernetes 2
rhacm2/thanos-receive-controller-rhel8
Not affected
Red Hat Advanced Cluster Management for Kubernetes 2
rhacm2/thanos-rhel9
Not affected
Red Hat Advanced Cluster Security 3
advanced-cluster-security/rhacs-main-rhel8
Not affected
Red Hat Advanced Cluster Security 3
advanced-cluster-security/rhacs-scanner-rhel8
Not affected
Red Hat Ansible Automation Platform 1.2
helm
Not affected
Red Hat Ceph Storage 5
rhceph/snmp-notifier-rhel8
Not affected
Red Hat Enterprise Linux 8
container-tools:4.0/podman
Not affected
Red Hat Enterprise Linux 8
container-tools:rhel8/podman
Not affected
Red Hat Enterprise Linux 9
podman
Not affected
Red Hat OpenShift Container Platform 3.11
ansible-service-broker
Out of support scope
Red Hat OpenShift Container Platform 3.11
atomic-openshift-dockerregistry
Not affected
Red Hat OpenShift Container Platform 4
openshift-compliance-openscap-container
Not affected
Red Hat OpenShift Container Platform 4
openshift-security-profiles-operator-container
Not affected
Red Hat OpenShift Container Platform 4
openshift4/kubernetes-nmstate-rhel9-operator
Not affected
Red Hat OpenShift Container Platform 4
openshift4/metallb-rhel8-operator
Not affected
Red Hat OpenShift Container Platform 4
openshift4/oc-mirror-plugin-rhel9
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-agent-installer-api-server-rhel8
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-agent-installer-node-agent-rhel9
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-aws-cluster-api-controllers-rhel8
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-azure-cluster-api-controllers-rhel8
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-cluster-kube-cluster-api-rhel8-operator
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-cluster-monitoring-rhel9-operator
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-cluster-platform-operators-manager-rhel8
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-console-rhel9
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-container-networking-plugins-rhel8
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-docker-registry
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-gcp-filestore-csi-driver-rhel8
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-grafana
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-hypershift-rhel9
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-local-storage-operator
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-machine-config-operator
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-metering-ansible-operator
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-metering-helm-container-rhel8
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-network-interface-bond-cni-rhel8
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-olm-rukpak-rhel8
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-openshift-controller-manager-rhel9
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-operator-marketplace
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-operator-registry
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-operator-sdk-rhel8
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-prom-label-proxy-rhel9
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-prometheus
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-prometheus-operator
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-ptp-rhel9-operator
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-thanos-rhel8
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-tools-rhel9
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-vsphere-cluster-api-controllers-rhel9
Not affected
Red Hat OpenShift Container Platform 4
openshift4/special-resource-rhel8-operator
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ztp-site-generate-rhel8
Not affected
Red Hat OpenShift Container Platform 4
podman
Not affected
Red Hat OpenShift Container Platform Assisted Installer 1
rhai-tech-preview/assisted-installer-agent-rhel8
Not affected
Red Hat OpenShift Container Platform Assisted Installer 1
rhai-tech-preview/assisted-installer-rhel8
Not affected
Red Hat OpenShift GitOps
openshift-gitops-1/applicationset-rhel8
Not affected
Red Hat OpenShift GitOps
openshift-gitops-1/argocd-rhel8
Not affected
Red Hat OpenShift GitOps
openshift-gitops-1/dex-rhel8
Not affected
Red Hat OpenShift GitOps
openshift-gitops-1/gitops-rhel8
Not affected
Red Hat OpenShift GitOps
openshift-gitops-1/gitops-rhel8-operator
Not affected
Red Hat OpenShift GitOps
openshift-gitops-1/kam-delivery-rhel8
Not affected
Red Hat OpenShift distributed tracing 2
rhosdt/jaeger-agent-rhel8
Not affected
Red Hat OpenShift distributed tracing 2
rhosdt/opentelemetry-collector-rhel8
Not affected
Red Hat OpenStack Platform 16.2
rhosp-rhel8/osp-director-agent
Not affected
Red Hat Openshift Container Storage 4
ocs4/mcg-rhel8-operator
Not affected
Red Hat Openshift Container Storage 4
ocs4/ocs-rhel8-operator
Not affected
Red Hat Openshift Data Foundation 4
odf4/ocs-rhel9-operator
Not affected
Red Hat Openshift Data Foundation 4
odf4/odf-csi-addons-sidecar-rhel9
Not affected
Red Hat Openshift Data Foundation 4
odf4/odf-multicluster-rhel9-operator
Not affected
Red Hat Openshift Data Foundation 4
odf4/odf-rhel9-operator
Not affected
Red Hat Openshift Data Foundation 4
odf4/odr-rhel9-operator
Not affected
Red Hat Openshift Sandboxed Containers
openshift-sandboxed-containers/osc-rhel8-operator
Not affected
Red Hat Quay 3
quay/quay-builder-rhel8
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Logging Subsystem for Red Hat OpenShift | openshift-logging/logging-loki-rhel9 | Not affected | n/a |
| Migration Toolkit for Containers | rhmtc/openshift-migration-registry-rhel8 | Not affected | n/a |
| OpenShift API for Data Protection | oadp/oadp-registry-rhel8 | Not affected | n/a |
| OpenShift API for Data Protection | oadp/oadp-velero-plugin-rhel9 | Not affected | n/a |
| OpenShift Developer Tools and Services | helm | Not affected | n/a |
| OpenShift Developer Tools and Services | jenkins-operator-container | Not affected | n/a |
| OpenShift Serverless | openshift-serverless-1-knative-client-plugin-event-sender-rhel8-container | Not affected | n/a |
| OpenShift Serverless | openshift-serverless-1/client-kn-rhel8 | Not affected | n/a |
| OpenShift Serverless | openshift-serverless-1/ingress-rhel8-operator | Not affected | n/a |
| Red Hat 3scale API Management Platform 2 | 3scale-operator-container | Not affected | n/a |
| Red Hat Advanced Cluster Management for Kubernetes 2 | acm-multicluster-globalhub-agent-container | Not affected | n/a |
| Red Hat Advanced Cluster Management for Kubernetes 2 | rhacm2/acm-cluster-proxy-rhel8 | Not affected | n/a |
| Red Hat Advanced Cluster Management for Kubernetes 2 | rhacm2/acm-governance-policy-addon-controller-rhel9 | Not affected | n/a |
| Red Hat Advanced Cluster Management for Kubernetes 2 | rhacm2/acm-grafana-rhel8 | Not affected | n/a |
| Red Hat Advanced Cluster Management for Kubernetes 2 | rhacm2/acm-prometheus-rhel9 | Not affected | n/a |
| Red Hat Advanced Cluster Management for Kubernetes 2 | rhacm2/acm-search-v2-rhel9 | Not affected | n/a |
| Red Hat Advanced Cluster Management for Kubernetes 2 | rhacm2/acm-volsync-addon-controller-rhel9 | Not affected | n/a |
| Red Hat Advanced Cluster Management for Kubernetes 2 | rhacm2/multicluster-operators-application-rhel8 | Not affected | n/a |
| Red Hat Advanced Cluster Management for Kubernetes 2 | rhacm2/multicluster-operators-channel-rhel9 | Not affected | n/a |
| Red Hat Advanced Cluster Management for Kubernetes 2 | rhacm2/multicluster-operators-subscription-rhel8 | Not affected | n/a |
| Red Hat Advanced Cluster Management for Kubernetes 2 | rhacm2/multiclusterhub-repo-rhel8 | Not affected | n/a |
| Red Hat Advanced Cluster Management for Kubernetes 2 | rhacm2/multiclusterhub-rhel8 | Not affected | n/a |
| Red Hat Advanced Cluster Management for Kubernetes 2 | rhacm2/observatorium-rhel8 | Not affected | n/a |
| Red Hat Advanced Cluster Management for Kubernetes 2 | rhacm2/prometheus-rhel8 | Not affected | n/a |
| Red Hat Advanced Cluster Management for Kubernetes 2 | rhacm2/rbac-query-proxy-rhel8 | Not affected | n/a |
| Red Hat Advanced Cluster Management for Kubernetes 2 | rhacm2/thanos-receive-controller-rhel8 | Not affected | n/a |
| Red Hat Advanced Cluster Management for Kubernetes 2 | rhacm2/thanos-rhel9 | Not affected | n/a |
| Red Hat Advanced Cluster Security 3 | advanced-cluster-security/rhacs-main-rhel8 | Not affected | n/a |
| Red Hat Advanced Cluster Security 3 | advanced-cluster-security/rhacs-scanner-rhel8 | Not affected | n/a |
| Red Hat Ansible Automation Platform 1.2 | helm | Not affected | n/a |
| Red Hat Ceph Storage 5 | rhceph/snmp-notifier-rhel8 | Not affected | n/a |
| Red Hat Enterprise Linux 8 | container-tools:4.0/podman | Not affected | n/a |
| Red Hat Enterprise Linux 8 | container-tools:rhel8/podman | Not affected | n/a |
| Red Hat Enterprise Linux 9 | podman | Not affected | n/a |
| Red Hat OpenShift Container Platform 3.11 | ansible-service-broker | Out of support scope | n/a |
| Red Hat OpenShift Container Platform 3.11 | atomic-openshift-dockerregistry | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift-compliance-openscap-container | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift-security-profiles-operator-container | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/kubernetes-nmstate-rhel9-operator | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/metallb-rhel8-operator | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/oc-mirror-plugin-rhel9 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-agent-installer-api-server-rhel8 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-agent-installer-node-agent-rhel9 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-aws-cluster-api-controllers-rhel8 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-azure-cluster-api-controllers-rhel8 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-cluster-kube-cluster-api-rhel8-operator | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-cluster-monitoring-rhel9-operator | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-cluster-platform-operators-manager-rhel8 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-console-rhel9 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-container-networking-plugins-rhel8 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-docker-registry | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-gcp-filestore-csi-driver-rhel8 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-grafana | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-hypershift-rhel9 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-local-storage-operator | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-machine-config-operator | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-metering-ansible-operator | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-metering-helm-container-rhel8 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-network-interface-bond-cni-rhel8 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-olm-rukpak-rhel8 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-openshift-controller-manager-rhel9 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-operator-marketplace | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-operator-registry | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-operator-sdk-rhel8 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-prom-label-proxy-rhel9 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-prometheus | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-prometheus-operator | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-ptp-rhel9-operator | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-thanos-rhel8 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-tools-rhel9 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-vsphere-cluster-api-controllers-rhel9 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/special-resource-rhel8-operator | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ztp-site-generate-rhel8 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | podman | Not affected | n/a |
| Red Hat OpenShift Container Platform Assisted Installer 1 | rhai-tech-preview/assisted-installer-agent-rhel8 | Not affected | n/a |
| Red Hat OpenShift Container Platform Assisted Installer 1 | rhai-tech-preview/assisted-installer-rhel8 | Not affected | n/a |
| Red Hat OpenShift GitOps | openshift-gitops-1/applicationset-rhel8 | Not affected | n/a |
| Red Hat OpenShift GitOps | openshift-gitops-1/argocd-rhel8 | Not affected | n/a |
| Red Hat OpenShift GitOps | openshift-gitops-1/dex-rhel8 | Not affected | n/a |
| Red Hat OpenShift GitOps | openshift-gitops-1/gitops-rhel8 | Not affected | n/a |
| Red Hat OpenShift GitOps | openshift-gitops-1/gitops-rhel8-operator | Not affected | n/a |
| Red Hat OpenShift GitOps | openshift-gitops-1/kam-delivery-rhel8 | Not affected | n/a |
| Red Hat OpenShift distributed tracing 2 | rhosdt/jaeger-agent-rhel8 | Not affected | n/a |
| Red Hat OpenShift distributed tracing 2 | rhosdt/opentelemetry-collector-rhel8 | Not affected | n/a |
| Red Hat OpenStack Platform 16.2 | rhosp-rhel8/osp-director-agent | Not affected | n/a |
| Red Hat Openshift Container Storage 4 | ocs4/mcg-rhel8-operator | Not affected | n/a |
| Red Hat Openshift Container Storage 4 | ocs4/ocs-rhel8-operator | Not affected | n/a |
| Red Hat Openshift Data Foundation 4 | odf4/ocs-rhel9-operator | Not affected | n/a |
| Red Hat Openshift Data Foundation 4 | odf4/odf-csi-addons-sidecar-rhel9 | Not affected | n/a |
| Red Hat Openshift Data Foundation 4 | odf4/odf-multicluster-rhel9-operator | Not affected | n/a |
| Red Hat Openshift Data Foundation 4 | odf4/odf-rhel9-operator | Not affected | n/a |
| Red Hat Openshift Data Foundation 4 | odf4/odr-rhel9-operator | Not affected | n/a |
| Red Hat Openshift Sandboxed Containers | openshift-sandboxed-containers/osc-rhel8-operator | Not affected | n/a |
| Red Hat Quay 3 | quay/quay-builder-rhel8 | Not affected | n/a |
github.com/gorilla/handlers
Go
Introduced 0 Fixed 1.3.0
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/gorilla/handlers | 0 | 1.3.0 |
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1 other source (Red Hat) ▾
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L
No CVSS v3.0 score for this CVE.
No CVSS v2.0 score for this CVE.
This CVE is not in the KEV list.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
NoneAutomatable
YesTechnical Impact
TotalDecision
n/aAssessed Apr 11, 2025 · SSVC 2.0.3
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (12 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 0.70% (0.00705) | 51.60th | v5 (v2026.06.15) |
| Jun 15, 2026 | 0.70% (0.00699) | 48.09th | v5 (v2026.06.15) |
| Mar 17, 2025 | 0.08% (0.00079) | 21.12th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.21% (0.00212) | 60.01th | v3 (v2023.03.01) |
| Jun 8, 2024 | 0.17% (0.00170) | 53.92th | v3 (v2023.03.01) |
| Jan 29, 2024 | 0.15% (0.00148) | 50.87th | v3 (v2023.03.01) |
| Jan 3, 2024 | 0.13% (0.00132) | 48.08th | v3 (v2023.03.01) |
| Nov 27, 2023 | 0.07% (0.00073) | 30.71th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.06% (0.00063) | 25.28th | v3 (v2023.03.01) |
| Mar 6, 2023 | 0.95% (0.00954) | 36.37th | v2 (v2022.01.01) |
| Jan 7, 2023 | 0.95% (0.00954) | 35.52th | v2 (v2022.01.01) |
| Dec 28, 2022 | 0.89% (0.00890) | 29.61th | v2 (v2022.01.01) |
References (8)
- https://access.redhat.com/security/cve/CVE-2017-20146 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2158262 Issue Tracking
- https://github.com/advisories/GHSA-jcr6-mmjj-pchw Advisory
- https://github.com/gorilla/handlers/commit/90663712d74cb411cbef281bc1e08c19d1a76145 PatchThird Party Advisory
- https://github.com/gorilla/handlers/pull/116 PatchThird Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2017-20146
- https://pkg.go.dev/vuln/GO-2020-0020 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2017-20146
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2017-20146 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2158262 | Issue Tracking | |
| https://github.com/advisories/GHSA-jcr6-mmjj-pchw | Advisory | |
| https://github.com/gorilla/handlers/commit/90663712d74cb411cbef281bc1e08c19d1a76145 | PatchThird Party Advisory | |
| https://github.com/gorilla/handlers/pull/116 | PatchThird Party Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2017-20146 | ||
| https://pkg.go.dev/vuln/GO-2020-0020 | Third Party Advisory | |
| https://www.cve.org/CVERecord?id=CVE-2017-20146 |
Change history (0)
No recorded changes yet.