An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade rcloneUpgrade yq-go | Aug 8, 2025 | Dec 18, 2024 |
| Amazon Linux Ami 2 | — | Upgrade amazon-cloudwatch-agentUpgrade nerdctlUpgrade nerdctl-debuginfoUpgrade soci-snapshotterUpgrade runfinch-finchUpgrade ecs-init | Jan 27, 2025 | Dec 18, 2024 |
| Amazon_linux_2023 | — | Upgrade nerdctlUpgrade amazon-cloudwatch-agentUpgrade runfinch-finchUpgrade ecs-initUpgrade soci-snapshotter | Feb 17, 2025 | Dec 18, 2024 |
| Debian | — | No solution existsUpgrade golang-golang-x-net | May 15, 2025 | Dec 18, 2024 |
| Freebsd | — | Upgrade oauth2-proxy | Jan 31, 2025 | Jan 30, 2025 |
| Redhat Openshift | — | Upgrade ose-nutanix-machine-controllers-rhel8 | Aug 10, 2026 | Dec 18, 2024 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.4.3Upgrade Splunk Enterprise to version 9.2.7Upgrade Splunk Enterprise to version 9.3.5Upgrade Splunk Universal Forwarder to version 9.4.2Upgrade Splunk Enterprise to version 9.3.4Upgrade Splunk Enterprise to version 9.1.9Upgrade Splunk Enterprise to version 9.4.2Upgrade Splunk Enterprise to version 9.1.10Upgrade Splunk Enterprise to version 9.2.6 | Sep 30, 2025 | Dec 18, 2024 |
| Suse | — | Upgrade rcloneUpgrade system-user-velociraptorUpgrade kubevirt-virt-controllerUpgrade helm-fish-completionUpgrade helm-bash-completionUpgrade helm-zsh-completionUpgrade kubevirt-container-diskUpgrade rclone-zsh-completionUpgrade kubevirt-testsUpgrade govulncheck-vulndbUpgrade kubevirt-virt-apiUpgrade rclone-bash-completionUpgrade kubevirt-virt-operatorUpgrade velociraptor-clientUpgrade gitea-teaUpgrade kubevirt-virt-exportserverUpgrade kubevirt-virt-handlerUpgrade apptainer-leapUpgrade velociraptorUpgrade apptainer-sle15_5Upgrade kubevirt-manifestsUpgrade kubevirt-pr-helper-confUpgrade obs-service-kubevirt_containers_metaUpgrade kubevirt-virt-launcherUpgrade kubevirt-virt-exportproxyUpgrade gitea-tea-zsh-completionUpgrade trivyUpgrade helmUpgrade kubevirt-virtctlUpgrade gitea-tea-bash-completionUpgrade apptainer-sle15_6Upgrade apptainer | Dec 5, 2025 | Jan 10, 2025 |
| Ubuntu | — | Upgrade adsys-windowsUpgrade juju (Ubuntu Pro)Upgrade golang-golang-x-net-dev (Ubuntu Pro)Upgrade juju-2.0 (Ubuntu Pro)Upgrade golang-go.net-dev (Ubuntu Pro)Upgrade adsys | Jan 10, 2025 | Dec 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub