Decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service.
stdlib
{ "imports": [ { "path": "math/big", "symbols": [ "Float.GobDecode", "Rat.GobDecode" ] } ] }
{ "url": "https://pkg.go.dev/vuln/GO-2022-0537" }