CVE-2025-58189

Publication date

2025-10-29 22:10:12

Family

Go

State

PUBLISHED

Description

When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information (the ALPN protocols sent by the client) which is not escaped.