encoding/pem vulnerabilities
1 known vulnerability in encoding/pem from Go standard library. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
encoding/pem: Allocation of Resources Without Limits or Throttling
The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs.