The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade grafana-selinuxUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade golang-binUpgrade aardvark-dnsUpgrade osbuild-composerUpgrade podmanUpgrade osbuild-composer-workerUpgrade containernetworking-pluginsUpgrade udicaUpgrade gvisor-tap-vsockUpgrade weldr-clientUpgrade golangUpgrade gvisor-tap-vsock-gvforwarderUpgrade criuUpgrade opentelemetry-collectorUpgrade containers-commonUpgrade buildahUpgrade golang-docsUpgrade skopeoUpgrade criu-libsUpgrade runcUpgrade container-selinuxUpgrade golang-testsUpgrade critUpgrade python3-criuUpgrade libslirp-develUpgrade grafana-pcpUpgrade golang-srcUpgrade netavarkUpgrade go-toolsetUpgrade libslirpUpgrade podman-gvproxyUpgrade podman-testsUpgrade slirp4netnsUpgrade osbuild-composer-coreUpgrade conmonUpgrade grafanaUpgrade skopeo-testsUpgrade fuse-overlayfsUpgrade git-lfsUpgrade toolboxUpgrade golang-miscUpgrade toolbox-testsUpgrade buildah-testsUpgrade python3-podmanUpgrade podman-dockerUpgrade delveUpgrade cockpit-podmanUpgrade crunUpgrade golang-raceUpgrade criu-develUpgrade podman-plugins | Jun 6, 2025 | Apr 8, 2025 |
| Alpine Linux | — | Upgrade go | Aug 8, 2025 | Apr 8, 2025 |
| Amazon Linux Ami 2 | — | Upgrade cri-toolsUpgrade rclone-debuginfoUpgrade containerd-stressUpgrade containerdUpgrade golang-sharedUpgrade soci-snapshotterUpgrade oci-add-hooks-debuginfoUpgrade runc-debuginfoUpgrade amazon-ecr-credential-helperUpgrade amazon-cloudwatch-agentUpgrade runcUpgrade golang-docsUpgrade cri-tools-debuginfoUpgrade containerd-debuginfoUpgrade amazon-ssm-agentUpgrade nerdctl-debuginfoUpgrade dockerUpgrade runfinch-finchUpgrade golang-binUpgrade golang-testsUpgrade docker-debuginfoUpgrade oci-add-hooksUpgrade golang-miscUpgrade golangUpgrade cni-pluginsUpgrade amazon-ecr-credential-helper-debuginfoUpgrade cni-plugins-debuginfoUpgrade nerdctlUpgrade golang-srcUpgrade rclone | Apr 17, 2025 | Apr 8, 2025 |
| Amazon_linux_2023 | — | Upgrade golangUpgrade oci-add-hooks-debuginfoUpgrade containerd-debuginfoUpgrade docker-debugsourceUpgrade amazon-ssm-agentUpgrade containerdUpgrade soci-snapshotterUpgrade runc-debugsourceUpgrade amazon-ecr-credential-helperUpgrade runc-debuginfoUpgrade cni-plugins-debuginfoUpgrade containerd-stress-debuginfoUpgrade golang-srcUpgrade containerd-debugsourceUpgrade cni-plugins-debugsourceUpgrade docker-debuginfoUpgrade amazon-cloudwatch-agentUpgrade golang-miscUpgrade oci-add-hooksUpgrade golang-sharedUpgrade golang-testsUpgrade runcUpgrade containerd-stressUpgrade golang-docsUpgrade golang-binUpgrade dockerUpgrade runfinch-finchUpgrade nerdctlUpgrade cni-pluginsUpgrade oci-add-hooks-debugsource | Apr 15, 2025 | Apr 8, 2025 |
| Debian | — | Upgrade golang-1.24No solution exists | May 15, 2025 | Apr 8, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | May 13, 2025 | Apr 8, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jun 13, 2025 | Apr 8, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jun 11, 2025 | Apr 8, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Dec 12, 2025 | May 12, 2025 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Sep 15, 2025 | May 12, 2025 |
| Oracle_linux | — | Upgrade osbuild-composer-workerUpgrade udicaUpgrade grafanaUpgrade containernetworking-pluginsUpgrade grafana-selinuxUpgrade buildahUpgrade osbuild-composerUpgrade containers-commonUpgrade python3-criuUpgrade ipp-usbUpgrade container-selinuxUpgrade runcUpgrade weldr-clientUpgrade aardvark-dnsUpgrade cockpit-podmanUpgrade gvisor-tap-vsock-gvforwarderUpgrade git-lfsUpgrade golang-docsUpgrade buildah-testsUpgrade podman-remoteUpgrade skopeo-testsUpgrade go-toolsetUpgrade delveUpgrade critUpgrade criu-develUpgrade grafana-pcpUpgrade golang-binUpgrade podman-dockerUpgrade golangUpgrade crunUpgrade osbuild-composer-coreUpgrade podman-pluginsUpgrade conmonUpgrade podman-testsUpgrade golang-miscUpgrade gvisor-tap-vsockUpgrade golang-raceUpgrade podmanUpgrade podman-gvproxyUpgrade python3-podmanUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade golang-testsUpgrade fuse-overlayfsUpgrade criu-libsUpgrade libslirp-develUpgrade netavarkUpgrade golang-srcUpgrade criuUpgrade slirp4netnsUpgrade skopeo | Jun 5, 2025 | Apr 8, 2025 |
| Redhat Openshift | — | Upgrade container-selinuxUpgrade ose-aws-ecr-image-credential-providerUpgrade skopeoUpgrade containernetworking-pluginsUpgrade rust-afterburnUpgrade ose-gcp-gcr-image-credential-providerUpgrade podmanUpgrade cri-oUpgrade slirp4netnsUpgrade ose-azure-acr-image-credential-providerUpgrade cri-toolsUpgrade kata-containersUpgrade crunUpgrade openshiftUpgrade openshift-clients | Aug 10, 2026 | Apr 8, 2025 |
| Redhat_linux | — | Upgrade libslirp-debuginfoUpgrade osbuild-composer-debugsourceUpgrade podman-remote-debuginfoUpgrade runc-debuginfoUpgrade criu-libsUpgrade osbuild-composer-dnf-jsonUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade golang-raceUpgrade container-selinuxUpgrade containernetworking-plugins-debuginfoUpgrade delve-debuginfoUpgrade ipp-usb-debuginfoUpgrade containers-commonUpgrade podman-catatonit-debuginfoUpgrade crun-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade toolbox-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-gvproxy-debuginfoUpgrade libslirp-develUpgrade git-lfsUpgrade delveUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolboxUpgrade podman-remoteUpgrade conmonUpgrade skopeoUpgrade weldr-client-debugsourceUpgrade osbuild-composer-tests-debuginfoUpgrade criu-develUpgrade podman-plugins-debuginfoUpgrade gvisor-tap-vsock-debugsourceUpgrade grafana-pcpUpgrade grafanaUpgrade slirp4netns-debuginfoUpgrade grafana-selinuxUpgrade podmanUpgrade grafana-debugsourceUpgrade delve-debugsourceUpgrade osbuild-composer-workerUpgrade podman-debugsourceUpgrade podman-pluginsUpgrade crunUpgrade containernetworking-pluginsUpgrade golang-docsUpgrade osbuild-composer-worker-debuginfoUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade critUpgrade buildah-debugsourceUpgrade crun-debuginfoUpgrade slirp4netns-debugsourceUpgrade gvisor-tap-vsock-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade git-lfs-debugsourceUpgrade weldr-clientUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeo-testsNo solution existsUpgrade criu-libs-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade weldr-client-tests-debuginfoUpgrade go-toolsetUpgrade weldr-client-debuginfoUpgrade runcUpgrade podman-gvproxyUpgrade podman-testsUpgrade podman-dockerUpgrade gvisor-tap-vsock-gvforwarderUpgrade cockpit-podmanUpgrade golang-binUpgrade grafana-pcp-debugsourceUpgrade buildah-debuginfoUpgrade slirp4netnsUpgrade git-lfs-debuginfoUpgrade toolbox-debugsourceUpgrade golang-srcUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade golangUpgrade opentelemetry-collectorUpgrade libslirpUpgrade python3-podmanUpgrade podman-tests-debuginfoUpgrade osbuild-composer-debuginfoUpgrade netavarkUpgrade golang-testsUpgrade buildah-tests-debuginfoUpgrade golang-miscUpgrade buildah-testsUpgrade toolbox-testsUpgrade udicaUpgrade podman-catatonitUpgrade criu-debuginfoUpgrade osbuild-composer-coreUpgrade grafana-debuginfoUpgrade skopeo-debugsourceUpgrade osbuild-composerUpgrade fuse-overlayfs-debugsourceUpgrade grafana-pcp-debuginfoUpgrade ipp-usbUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade conmon-debugsourceUpgrade podman-debuginfoUpgrade gvisor-tap-vsockUpgrade runc-debugsourceUpgrade criuUpgrade criu-debugsourceUpgrade conmon-debuginfoUpgrade skopeo-debuginfoUpgrade buildah | Jun 5, 2025 | Apr 8, 2025 |
| Rocky_linux | — | Upgrade podman-pluginsUpgrade podman-remoteUpgrade podmanUpgrade buildahUpgrade criu-libs-debuginfoUpgrade delve-debugsourceUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade ipp-usb-debuginfoUpgrade podman-catatonit-debuginfoUpgrade golang-binUpgrade gvisor-tap-vsock-debuginfoUpgrade netavarkUpgrade weldr-client-debugsourceUpgrade podman-debuginfoUpgrade toolbox-debugsourceUpgrade osbuild-composer-coreUpgrade conmonUpgrade golang-raceUpgrade grafana-selinuxUpgrade fuse-overlayfsUpgrade osbuild-composerUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade podman-catatonitUpgrade containernetworking-pluginsUpgrade runcUpgrade toolboxUpgrade podman-tests-debuginfoUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade toolbox-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crunUpgrade buildah-tests-debuginfoUpgrade criuUpgrade grafana-debuginfoUpgrade podman-remote-debuginfoUpgrade skopeo-debugsourceUpgrade skopeoUpgrade criu-debuginfoUpgrade grafana-pcp-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade gvisor-tap-vsockUpgrade gvisor-tap-vsock-debugsourceUpgrade critUpgrade golangUpgrade grafana-pcpUpgrade grafana-pcp-debuginfoUpgrade crun-debugsourceUpgrade runc-debugsourceUpgrade grafana-debugsourceUpgrade ipp-usbUpgrade delveUpgrade slirp4netnsUpgrade weldr-client-debuginfoUpgrade libslirp-debugsourceUpgrade aardvark-dnsUpgrade grafanaUpgrade git-lfs-debugsourceUpgrade libslirp-develUpgrade opentelemetry-collectorUpgrade fuse-overlayfs-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade crun-debuginfoUpgrade containers-commonUpgrade libslirp-debuginfoUpgrade buildah-testsUpgrade osbuild-composer-workerUpgrade podman-plugins-debuginfoUpgrade go-toolsetUpgrade delve-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade weldr-clientUpgrade slirp4netns-debuginfoUpgrade podman-gvproxyUpgrade runc-debuginfoUpgrade podman-testsUpgrade skopeo-testsUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade podman-debugsourceUpgrade gvisor-tap-vsock-gvforwarderUpgrade criu-libsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade git-lfs-debuginfoUpgrade criu-debugsourceUpgrade slirp4netns-debugsourceUpgrade criu-develUpgrade conmon-debuginfoUpgrade skopeo-debuginfoUpgrade python3-criuUpgrade git-lfsUpgrade libslirp | Jul 31, 2025 | Jul 29, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 9.2.12Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.3.9 | Jul 30, 2026 | Apr 8, 2025 |
| Suse | — | Upgrade go1.24-openssl-raceUpgrade go1.24-raceUpgrade go1.23-raceUpgrade go1.23-openssl-raceUpgrade go1.23-opensslUpgrade go1.23-docUpgrade go1.23Upgrade go1.24Upgrade go1.23-openssl-docUpgrade govulncheck-vulndbUpgrade go1.24-docUpgrade go1.24-opensslUpgrade go1.24-libstd | Dec 5, 2025 | Jun 5, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 8, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub