2019-05-17 21:29:00 2019-05-20 16:38:15

GoHTTP through 2017-07-25 has a GetExtension heap-based buffer overflow via a long extension.