The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade conmonUpgrade skopeo-testsUpgrade cockpit-podmanUpgrade podman-dockerUpgrade netavarkUpgrade toolboxUpgrade osbuild-composer-coreUpgrade grafanaUpgrade go-toolsetUpgrade golang-raceUpgrade fuse-overlayfsUpgrade crunUpgrade podman-gvproxyUpgrade python3-podmanUpgrade libslirpUpgrade criu-develUpgrade delveUpgrade slirp4netnsUpgrade git-lfsUpgrade buildah-testsUpgrade toolbox-testsUpgrade golang-miscUpgrade podman-pluginsUpgrade podman-testsUpgrade container-selinuxUpgrade criuUpgrade oci-seccomp-bpf-hookUpgrade weldr-clientUpgrade containers-commonUpgrade golang-testsUpgrade buildahUpgrade runcUpgrade libslirp-develUpgrade criu-libsUpgrade grafana-pcpUpgrade critUpgrade podman-catatonitUpgrade grafana-selinuxUpgrade osbuild-composer-workerUpgrade podmanUpgrade gvisor-tap-vsockUpgrade udicaUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade skopeoUpgrade golangUpgrade gvisor-tap-vsock-gvforwarderUpgrade opentelemetry-collectorUpgrade aardvark-dnsUpgrade osbuild-composerUpgrade golang-docsUpgrade golang-srcUpgrade golang-binUpgrade python3-criu | Jun 6, 2025 | Apr 8, 2025 |
| Alpine Linux | — | Upgrade go | Aug 8, 2025 | Apr 8, 2025 |
| Amazon Linux Ami 2 | — | Upgrade cri-tools-debuginfoUpgrade runc-debuginfoUpgrade containerdUpgrade oci-add-hooks-debuginfoUpgrade runcUpgrade amazon-ecr-credential-helperUpgrade cri-toolsUpgrade amazon-ssm-agentUpgrade containerd-debuginfoUpgrade amazon-cloudwatch-agentUpgrade golang-sharedUpgrade nerdctl-debuginfoUpgrade golang-docsUpgrade soci-snapshotterUpgrade rclone-debuginfoUpgrade containerd-stressUpgrade oci-add-hooksUpgrade golang-testsUpgrade cni-pluginsUpgrade dockerUpgrade nerdctlUpgrade rcloneUpgrade amazon-ecr-credential-helper-debuginfoUpgrade golang-srcUpgrade docker-debuginfoUpgrade golang-binUpgrade runfinch-finchUpgrade cni-plugins-debuginfoUpgrade golang-miscUpgrade golang | Apr 17, 2025 | Apr 8, 2025 |
| Amazon_linux_2023 | — | Upgrade runcUpgrade containerd-stressUpgrade golang-testsUpgrade oci-add-hooks-debugsourceUpgrade nerdctlUpgrade cni-pluginsUpgrade runfinch-finchUpgrade golang-binUpgrade golang-docsUpgrade dockerUpgrade docker-debuginfoUpgrade containerd-debuginfoUpgrade amazon-ssm-agentUpgrade cni-plugins-debugsourceUpgrade runc-debugsourceUpgrade runc-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade golangUpgrade oci-add-hooksUpgrade containerd-stress-debuginfoUpgrade golang-srcUpgrade amazon-cloudwatch-agentUpgrade amazon-ecr-credential-helperUpgrade docker-debugsourceUpgrade cni-plugins-debuginfoUpgrade soci-snapshotterUpgrade golang-sharedUpgrade golang-miscUpgrade containerd-debugsourceUpgrade containerd | Apr 15, 2025 | Apr 8, 2025 |
| Debian | — | Upgrade golang-1.24 | May 15, 2025 | Apr 8, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | May 13, 2025 | Apr 8, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jun 13, 2025 | Apr 8, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jun 11, 2025 | Apr 8, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Dec 12, 2025 | May 12, 2025 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Sep 15, 2025 | May 12, 2025 |
| Oracle_linux | — | Upgrade python3-podmanUpgrade podman-catatonitUpgrade gvisor-tap-vsockUpgrade criu-libsUpgrade podmanUpgrade podman-gvproxyUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade podman-dockerUpgrade golang-srcUpgrade netavarkUpgrade criuUpgrade conmonUpgrade fuse-overlayfsUpgrade golang-testsUpgrade golang-raceUpgrade podman-pluginsUpgrade crunUpgrade skopeoUpgrade podman-testsUpgrade osbuild-composer-coreUpgrade slirp4netnsUpgrade golang-miscUpgrade libslirp-develUpgrade golangUpgrade python3-criuUpgrade aardvark-dnsUpgrade grafanaUpgrade containernetworking-pluginsUpgrade osbuild-composer-workerUpgrade container-selinuxUpgrade weldr-clientUpgrade golang-binUpgrade udicaUpgrade runcUpgrade grafana-selinuxUpgrade grafana-pcpUpgrade critUpgrade criu-develUpgrade osbuild-composerUpgrade delveUpgrade gvisor-tap-vsock-gvforwarderUpgrade skopeo-testsUpgrade podman-remoteUpgrade go-toolsetUpgrade buildah-testsUpgrade containers-commonUpgrade buildahUpgrade ipp-usbUpgrade golang-docsUpgrade git-lfsUpgrade cockpit-podman | Jun 5, 2025 | Apr 8, 2025 |
| Redhat Openshift | — | Upgrade kata-containersUpgrade crunUpgrade openshiftUpgrade cri-oUpgrade ose-azure-acr-image-credential-providerUpgrade cri-toolsUpgrade slirp4netnsUpgrade openshift-clientsUpgrade rust-afterburnUpgrade podmanUpgrade ose-aws-ecr-image-credential-providerUpgrade skopeoUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade ose-gcp-gcr-image-credential-provider | Aug 10, 2026 | Apr 8, 2025 |
| Redhat_linux | — | Upgrade gvisor-tap-vsock-debuginfoUpgrade crun-debuginfoUpgrade criu-libsUpgrade delveUpgrade toolbox-debuginfoUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debuginfoUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade slirp4netns-debugsourceUpgrade runc-debuginfoUpgrade skopeo-testsUpgrade crunUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade weldr-clientUpgrade grafana-debugsourceUpgrade git-lfs-debugsourceUpgrade skopeoUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade grafana-pcpUpgrade gvisor-tap-vsock-debugsourceUpgrade grafana-selinuxUpgrade grafanaUpgrade golang-docsUpgrade critUpgrade podmanUpgrade conmonUpgrade containers-commonUpgrade fuse-overlayfs-debuginfoUpgrade delve-debuginfoUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-develUpgrade git-lfsUpgrade golang-raceUpgrade toolboxUpgrade podman-remoteUpgrade osbuild-composer-debugsourceUpgrade podman-remote-debuginfoUpgrade container-selinuxUpgrade ipp-usb-debuginfoUpgrade libslirp-debuginfoUpgrade osbuild-composer-dnf-jsonUpgrade criu-develUpgrade crun-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade weldr-client-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade osbuild-composer-tests-debuginfoUpgrade slirp4netns-debuginfoUpgrade delve-debugsourceUpgrade osbuild-composer-workerUpgrade podman-pluginsUpgrade podman-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade containernetworking-pluginsUpgrade conmon-debugsourceUpgrade aardvark-dnsUpgrade fuse-overlayfs-debugsourceUpgrade podman-tests-debuginfoUpgrade osbuild-composerUpgrade podman-debuginfoUpgrade criuUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade criu-debugsourceUpgrade fuse-overlayfsUpgrade gvisor-tap-vsockUpgrade grafana-debuginfoUpgrade podman-testsUpgrade buildahNo solution existsUpgrade weldr-client-debuginfoUpgrade skopeo-debugsourceUpgrade grafana-pcp-debugsourceUpgrade toolbox-debugsourceUpgrade runcUpgrade gvisor-tap-vsock-gvforwarderUpgrade golang-binUpgrade opentelemetry-collectorUpgrade grafana-pcp-debuginfoUpgrade netavarkUpgrade buildah-tests-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-gvproxyUpgrade podman-dockerUpgrade buildah-testsUpgrade git-lfs-debuginfoUpgrade go-toolsetUpgrade osbuild-composer-debuginfoUpgrade python3-podmanUpgrade ipp-usbUpgrade golangUpgrade osbuild-composer-coreUpgrade cockpit-podmanUpgrade podman-catatonitUpgrade slirp4netnsUpgrade golang-miscUpgrade golang-testsUpgrade udicaUpgrade toolbox-testsUpgrade osbuild-composer-core-debuginfoUpgrade golang-srcUpgrade buildah-debuginfoUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade weldr-client-tests-debuginfoUpgrade libslirpUpgrade skopeo-debuginfoUpgrade criu-debuginfo | Jun 5, 2025 | Apr 8, 2025 |
| Rocky_linux | — | Upgrade git-lfs-debugsourceUpgrade grafanaUpgrade libslirp-debugsourceUpgrade weldr-client-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade containernetworking-plugins-debuginfoUpgrade criu-libsUpgrade git-lfsUpgrade containers-commonUpgrade skopeo-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade runc-debugsourceUpgrade toolbox-debuginfoUpgrade conmon-debuginfoUpgrade delveUpgrade ipp-usbUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade opentelemetry-collectorUpgrade slirp4netns-debugsourceUpgrade criu-debugsourceUpgrade crun-debuginfoUpgrade grafana-debugsourceUpgrade criu-develUpgrade git-lfs-debuginfoUpgrade buildah-testsUpgrade weldr-clientUpgrade libslirp-debuginfoUpgrade libslirpUpgrade osbuild-composer-workerUpgrade libslirp-develUpgrade podman-gvproxy-debuginfoUpgrade podman-debugsourceUpgrade gvisor-tap-vsock-gvforwarderUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade podman-testsUpgrade aardvark-dnsUpgrade delve-debuginfoUpgrade go-toolsetUpgrade runc-debuginfoUpgrade python3-criuUpgrade podman-plugins-debuginfoUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade delve-debugsourceUpgrade toolboxUpgrade fuse-overlayfs-debuginfoUpgrade golang-raceUpgrade podman-remote-debuginfoUpgrade critUpgrade gvisor-tap-vsock-debugsourceUpgrade golang-binUpgrade containernetworking-pluginsUpgrade conmonUpgrade gvisor-tap-vsock-debuginfoUpgrade weldr-client-debugsourceUpgrade criuUpgrade toolbox-testsUpgrade runcUpgrade podman-tests-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade gvisor-tap-vsockUpgrade buildah-debugsourceUpgrade buildah-tests-debuginfoUpgrade skopeo-debugsourceUpgrade toolbox-debugsourceUpgrade osbuild-composer-coreUpgrade netavarkUpgrade grafana-pcpUpgrade podman-remoteUpgrade grafana-debuginfoUpgrade podman-catatonitUpgrade osbuild-composerUpgrade grafana-selinuxUpgrade fuse-overlayfsUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade podman-debuginfoUpgrade crun-debugsourceUpgrade criu-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade grafana-pcp-debuginfoUpgrade grafana-pcp-debugsourceUpgrade golangUpgrade crunUpgrade podman-catatonit-debuginfoUpgrade ipp-usb-debuginfoUpgrade skopeoUpgrade podmanUpgrade buildahUpgrade criu-libs-debuginfoUpgrade podman-pluginsUpgrade gvisor-tap-vsock-gvforwarder-debuginfo | Jul 31, 2025 | Jul 29, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 9.2.12Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 9.4.9 | Jul 30, 2026 | Apr 8, 2025 |
| Suse | — | Upgrade go1.23-openssl-raceUpgrade go1.23-raceUpgrade go1.24-openssl-raceUpgrade go1.24-raceUpgrade go1.24-docUpgrade go1.24Upgrade go1.23-openssl-docUpgrade go1.23Upgrade go1.24-opensslUpgrade govulncheck-vulndbUpgrade go1.23-opensslUpgrade go1.24-libstdUpgrade go1.23-doc | Dec 5, 2025 | Jun 5, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 8, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub