The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-srcUpgrade golang-testsUpgrade buildahUpgrade critUpgrade golang-docsUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade weldr-clientUpgrade gvisor-tap-vsock-gvforwarderUpgrade libslirp-develUpgrade skopeoUpgrade golang-binUpgrade container-selinuxUpgrade opentelemetry-collectorUpgrade podman-remoteUpgrade aardvark-dnsUpgrade python3-criuUpgrade runcUpgrade criu-libsUpgrade podmanUpgrade osbuild-composerUpgrade grafana-pcpUpgrade criuUpgrade golangUpgrade gvisor-tap-vsockUpgrade osbuild-composer-workerUpgrade udicaUpgrade containernetworking-pluginsUpgrade grafana-selinuxUpgrade podman-catatonitUpgrade delveUpgrade fuse-overlayfsUpgrade conmonUpgrade go-toolsetUpgrade grafanaUpgrade toolboxUpgrade python3-podmanUpgrade golang-miscUpgrade podman-dockerUpgrade crunUpgrade toolbox-testsUpgrade golang-raceUpgrade buildah-testsUpgrade cockpit-podmanUpgrade git-lfsUpgrade podman-testsUpgrade netavarkUpgrade slirp4netnsUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade libslirpUpgrade podman-pluginsUpgrade criu-develUpgrade osbuild-composer-core | Jun 6, 2025 | Apr 8, 2025 |
| Alpine Linux | — | Upgrade go | Aug 8, 2025 | Apr 8, 2025 |
| Amazon Linux Ami 2 | — | Upgrade golang-sharedUpgrade containerdUpgrade runcUpgrade cri-tools-debuginfoUpgrade amazon-ecr-credential-helperUpgrade oci-add-hooks-debuginfoUpgrade containerd-stressUpgrade soci-snapshotterUpgrade rclone-debuginfoUpgrade amazon-cloudwatch-agentUpgrade amazon-ssm-agentUpgrade nerdctl-debuginfoUpgrade golang-docsUpgrade runc-debuginfoUpgrade containerd-debuginfoUpgrade cri-toolsUpgrade nerdctlUpgrade dockerUpgrade runfinch-finchUpgrade amazon-ecr-credential-helper-debuginfoUpgrade golang-srcUpgrade rcloneUpgrade golang-binUpgrade cni-pluginsUpgrade golang-miscUpgrade golangUpgrade oci-add-hooksUpgrade golang-testsUpgrade cni-plugins-debuginfoUpgrade docker-debuginfo | Apr 17, 2025 | Apr 8, 2025 |
| Amazon_linux_2023 | — | Upgrade runfinch-finchUpgrade cni-pluginsUpgrade nerdctlUpgrade oci-add-hooks-debugsourceUpgrade runcUpgrade dockerUpgrade golang-binUpgrade golang-docsUpgrade containerd-stressUpgrade golang-testsUpgrade containerd-debuginfoUpgrade oci-add-hooksUpgrade oci-add-hooks-debuginfoUpgrade runc-debuginfoUpgrade runc-debugsourceUpgrade amazon-ecr-credential-helperUpgrade golang-srcUpgrade containerd-stress-debuginfoUpgrade containerdUpgrade amazon-ssm-agentUpgrade golang-sharedUpgrade golang-miscUpgrade soci-snapshotterUpgrade cni-plugins-debugsourceUpgrade amazon-cloudwatch-agentUpgrade docker-debuginfoUpgrade cni-plugins-debuginfoUpgrade docker-debugsourceUpgrade containerd-debugsourceUpgrade golang | Apr 15, 2025 | Apr 8, 2025 |
| Debian | — | Upgrade golang-1.24 | May 15, 2025 | Apr 8, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | May 13, 2025 | Apr 8, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jun 13, 2025 | Apr 8, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jun 11, 2025 | Apr 8, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Dec 12, 2025 | May 12, 2025 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Sep 15, 2025 | May 12, 2025 |
| Oracle_linux | — | Upgrade python3-podmanUpgrade fuse-overlayfsUpgrade golangUpgrade golang-testsUpgrade netavarkUpgrade podman-catatonitUpgrade osbuild-composer-coreUpgrade podman-dockerUpgrade libslirpUpgrade criu-libsUpgrade slirp4netnsUpgrade criuUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade golang-srcUpgrade skopeoUpgrade golang-raceUpgrade crunUpgrade podman-testsUpgrade gvisor-tap-vsockUpgrade podman-pluginsUpgrade podmanUpgrade golang-miscUpgrade conmonUpgrade podman-gvproxyUpgrade buildah-testsUpgrade weldr-clientUpgrade podman-remoteUpgrade grafana-pcpUpgrade critUpgrade criu-develUpgrade containers-commonUpgrade osbuild-composer-workerUpgrade buildahUpgrade container-selinuxUpgrade grafanaUpgrade ipp-usbUpgrade python3-criuUpgrade osbuild-composerUpgrade golang-docsUpgrade golang-binUpgrade delveUpgrade grafana-selinuxUpgrade runcUpgrade udicaUpgrade containernetworking-pluginsUpgrade git-lfsUpgrade cockpit-podmanUpgrade aardvark-dnsUpgrade skopeo-testsUpgrade gvisor-tap-vsock-gvforwarderUpgrade go-toolset | Jun 5, 2025 | Apr 8, 2025 |
| Redhat Openshift | — | Upgrade skopeoUpgrade podmanUpgrade rust-afterburnUpgrade ose-aws-ecr-image-credential-providerUpgrade ose-gcp-gcr-image-credential-providerUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade cri-toolsUpgrade cri-oUpgrade openshiftUpgrade slirp4netnsUpgrade kata-containersUpgrade ose-azure-acr-image-credential-providerUpgrade crunUpgrade openshift-clients | Aug 10, 2026 | Apr 8, 2025 |
| Redhat_linux | — | Upgrade containernetworking-pluginsUpgrade golang-raceUpgrade osbuild-composer-debugsourceUpgrade podman-debugsourceUpgrade osbuild-composer-workerUpgrade grafana-selinuxUpgrade osbuild-composer-worker-debuginfoUpgrade osbuild-composer-dnf-jsonUpgrade delve-debugsourceUpgrade runc-debuginfoUpgrade podman-pluginsUpgrade slirp4netns-debuginfoUpgrade podman-remote-debuginfoUpgrade skopeoUpgrade grafanaUpgrade grafana-pcpUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade criu-libsUpgrade podmanUpgrade gvisor-tap-vsock-debugsourceUpgrade crun-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade gvisor-tap-vsock-debuginfoUpgrade golang-docsUpgrade libslirp-debuginfoUpgrade critUpgrade grafana-debugsourceUpgrade crun-debugsourceUpgrade osbuild-composer-tests-debuginfoUpgrade crunUpgrade git-lfs-debugsourceUpgrade weldr-clientUpgrade containers-commonUpgrade podman-plugins-debuginfoUpgrade weldr-client-debugsourceUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade container-selinuxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-develUpgrade skopeo-testsUpgrade delve-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade ipp-usb-debuginfoUpgrade toolbox-debuginfoUpgrade git-lfsUpgrade podman-remoteUpgrade toolboxUpgrade libslirp-develUpgrade delveUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade conmonUpgrade gvisor-tap-vsockUpgrade criu-debugsourceUpgrade conmon-debuginfoUpgrade golang-miscUpgrade podman-catatonitUpgrade buildah-debuginfoUpgrade golang-binUpgrade grafana-pcp-debugsourceUpgrade slirp4netnsUpgrade weldr-client-debuginfoUpgrade gvisor-tap-vsock-gvforwarderUpgrade osbuild-composer-debuginfoUpgrade criu-debuginfoUpgrade grafana-debuginfoUpgrade aardvark-dnsUpgrade ipp-usbUpgrade cockpit-podmanUpgrade podman-testsUpgrade podman-dockerUpgrade runcUpgrade podman-gvproxyUpgrade criu-libs-debuginfoUpgrade buildahUpgrade criuUpgrade skopeo-debuginfoUpgrade conmon-debugsourceUpgrade fuse-overlayfsUpgrade runc-debugsourceUpgrade podman-debuginfoUpgrade podman-tests-debuginfoUpgrade udicaUpgrade golang-testsUpgrade golang-srcUpgrade python3-podmanUpgrade osbuild-composer-core-debuginfoUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade golangUpgrade git-lfs-debuginfoUpgrade go-toolsetUpgrade toolbox-debugsourceUpgrade grafana-pcp-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade netavarkUpgrade osbuild-composerNo solution existsUpgrade skopeo-debugsourceUpgrade opentelemetry-collectorUpgrade libslirpUpgrade weldr-client-tests-debuginfoUpgrade toolbox-testsUpgrade buildah-testsUpgrade osbuild-composer-core | Jun 5, 2025 | Apr 8, 2025 |
| Rocky_linux | — | Upgrade skopeoUpgrade critUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade golang-binUpgrade ipp-usb-debuginfoUpgrade containernetworking-pluginsUpgrade podman-catatonit-debuginfoUpgrade conmonUpgrade gvisor-tap-vsock-debuginfoUpgrade gvisor-tap-vsockUpgrade podman-pluginsUpgrade criu-libs-debuginfoUpgrade buildah-tests-debuginfoUpgrade netavarkUpgrade skopeo-debugsourceUpgrade toolbox-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade grafana-debuginfoUpgrade podman-remoteUpgrade delve-debugsourceUpgrade podman-catatonitUpgrade podman-remote-debuginfoUpgrade osbuild-composerUpgrade podman-debuginfoUpgrade crunUpgrade fuse-overlayfsUpgrade criuUpgrade gvisor-tap-vsock-debugsourceUpgrade grafana-selinuxUpgrade toolbox-testsUpgrade weldr-client-debugsourceUpgrade golang-raceUpgrade buildah-debuginfoUpgrade podmanUpgrade conmon-debugsourceUpgrade grafana-pcpUpgrade grafana-pcp-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade grafana-pcp-debugsourceUpgrade golangUpgrade criu-debuginfoUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-tests-debuginfoUpgrade toolboxUpgrade runcUpgrade buildahUpgrade osbuild-composer-coreUpgrade buildah-debugsourceUpgrade grafana-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade gvisor-tap-vsock-gvforwarderUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade delveUpgrade criu-libsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade git-lfs-debuginfoUpgrade criu-develUpgrade skopeo-debuginfoUpgrade libslirpUpgrade git-lfsUpgrade python3-criuUpgrade conmon-debuginfoUpgrade git-lfs-debugsourceUpgrade aardvark-dnsUpgrade containers-commonUpgrade crun-debuginfoUpgrade toolbox-debuginfoUpgrade runc-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debugsourceUpgrade slirp4netns-debuginfoUpgrade skopeo-testsUpgrade podman-testsUpgrade podman-gvproxyUpgrade go-toolsetUpgrade containernetworking-plugins-debuginfoUpgrade runc-debuginfoUpgrade podman-plugins-debuginfoUpgrade grafanaUpgrade podman-debugsourceUpgrade weldr-clientUpgrade delve-debuginfoUpgrade osbuild-composer-workerUpgrade libslirp-debuginfoUpgrade buildah-testsUpgrade podman-gvproxy-debuginfoUpgrade weldr-client-debuginfoUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade criu-debugsourceUpgrade opentelemetry-collectorUpgrade libslirp-develUpgrade ipp-usb | Jul 31, 2025 | Jul 29, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 9.2.12Upgrade Splunk Enterprise to version 9.4.8 | Jul 30, 2026 | Apr 8, 2025 |
| Suse | — | Upgrade go1.24-docUpgrade go1.23-openssl-docUpgrade govulncheck-vulndbUpgrade go1.24Upgrade go1.23-opensslUpgrade go1.24-opensslUpgrade go1.23Upgrade go1.24-libstdUpgrade go1.23-docUpgrade go1.23-openssl-raceUpgrade go1.24-openssl-raceUpgrade go1.23-raceUpgrade go1.24-race | Dec 5, 2025 | Jun 5, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 8, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub