The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade go-toolsetUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade osbuild-composer-coreUpgrade libslirpUpgrade podman-pluginsUpgrade fuse-overlayfsUpgrade golang-miscUpgrade golang-raceUpgrade delveUpgrade slirp4netnsUpgrade crunUpgrade criu-develUpgrade git-lfsUpgrade conmonUpgrade netavarkUpgrade toolboxUpgrade buildah-testsUpgrade python3-podmanUpgrade toolbox-testsUpgrade podman-dockerUpgrade skopeo-testsUpgrade podman-testsUpgrade grafanaUpgrade aardvark-dnsUpgrade containers-commonUpgrade osbuild-composerUpgrade podman-catatonitUpgrade critUpgrade grafana-selinuxUpgrade oci-seccomp-bpf-hookUpgrade udicaUpgrade gvisor-tap-vsockUpgrade osbuild-composer-workerUpgrade buildahUpgrade opentelemetry-collectorUpgrade python3-criuUpgrade criu-libsUpgrade container-selinuxUpgrade golang-srcUpgrade golang-testsUpgrade gvisor-tap-vsock-gvforwarderUpgrade grafana-pcpUpgrade weldr-clientUpgrade criuUpgrade golang-docsUpgrade golang-binUpgrade podmanUpgrade containernetworking-pluginsUpgrade skopeoUpgrade libslirp-develUpgrade runcUpgrade golangUpgrade podman-remote | Jun 6, 2025 | Apr 8, 2025 |
| Alpine Linux | — | Upgrade go | Aug 8, 2025 | Apr 8, 2025 |
| Amazon Linux Ami 2 | — | Upgrade soci-snapshotterUpgrade containerd-stressUpgrade amazon-cloudwatch-agentUpgrade golang-sharedUpgrade amazon-ssm-agentUpgrade golang-docsUpgrade runcUpgrade oci-add-hooks-debuginfoUpgrade runc-debuginfoUpgrade amazon-ecr-credential-helperUpgrade nerdctl-debuginfoUpgrade containerd-debuginfoUpgrade cri-tools-debuginfoUpgrade cri-toolsUpgrade rclone-debuginfoUpgrade containerdUpgrade cni-plugins-debuginfoUpgrade oci-add-hooksUpgrade golangUpgrade cni-pluginsUpgrade amazon-ecr-credential-helper-debuginfoUpgrade dockerUpgrade golang-binUpgrade docker-debuginfoUpgrade runfinch-finchUpgrade rcloneUpgrade nerdctlUpgrade golang-testsUpgrade golang-srcUpgrade golang-misc | Apr 17, 2025 | Apr 8, 2025 |
| Amazon_linux_2023 | — | Upgrade golang-testsUpgrade runcUpgrade cni-pluginsUpgrade golang-binUpgrade runfinch-finchUpgrade golang-docsUpgrade containerd-stressUpgrade oci-add-hooks-debugsourceUpgrade nerdctlUpgrade dockerUpgrade cni-plugins-debuginfoUpgrade containerdUpgrade golang-miscUpgrade amazon-cloudwatch-agentUpgrade cni-plugins-debugsourceUpgrade docker-debugsourceUpgrade containerd-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade golangUpgrade golang-srcUpgrade amazon-ssm-agentUpgrade containerd-stress-debuginfoUpgrade oci-add-hooksUpgrade runc-debugsourceUpgrade runc-debuginfoUpgrade containerd-debugsourceUpgrade amazon-ecr-credential-helperUpgrade soci-snapshotterUpgrade golang-sharedUpgrade docker-debuginfo | Apr 15, 2025 | Apr 8, 2025 |
| Debian | — | Upgrade golang-1.24No solution exists | May 15, 2025 | Apr 8, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | May 13, 2025 | Apr 8, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jun 13, 2025 | Apr 8, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jun 11, 2025 | Apr 8, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Dec 12, 2025 | May 12, 2025 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Sep 15, 2025 | May 12, 2025 |
| Oracle_linux | — | Upgrade podmanUpgrade golang-srcUpgrade gvisor-tap-vsockUpgrade criuUpgrade netavarkUpgrade python3-podmanUpgrade golang-miscUpgrade podman-gvproxyUpgrade osbuild-composer-coreUpgrade podman-pluginsUpgrade conmonUpgrade podman-testsUpgrade skopeoUpgrade podman-dockerUpgrade golangUpgrade crunUpgrade golang-raceUpgrade libslirp-develUpgrade slirp4netnsUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade golang-testsUpgrade criu-libsUpgrade fuse-overlayfsUpgrade skopeo-testsUpgrade critUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade delveUpgrade grafana-selinuxUpgrade udicaUpgrade runcUpgrade aardvark-dnsUpgrade golang-docsUpgrade golang-binUpgrade git-lfsUpgrade cockpit-podmanUpgrade criu-develUpgrade grafana-pcpUpgrade osbuild-composerUpgrade containers-commonUpgrade buildahUpgrade ipp-usbUpgrade podman-remoteUpgrade python3-criuUpgrade gvisor-tap-vsock-gvforwarderUpgrade go-toolsetUpgrade buildah-testsUpgrade weldr-clientUpgrade osbuild-composer-workerUpgrade grafana | Jun 5, 2025 | Apr 8, 2025 |
| Redhat Openshift | — | Upgrade container-selinuxUpgrade podmanUpgrade ose-aws-ecr-image-credential-providerUpgrade containernetworking-pluginsUpgrade rust-afterburnUpgrade ose-gcp-gcr-image-credential-providerUpgrade skopeoUpgrade ose-azure-acr-image-credential-providerUpgrade cri-oUpgrade openshift-clientsUpgrade crunUpgrade slirp4netnsUpgrade cri-toolsUpgrade kata-containersUpgrade openshift | Aug 10, 2026 | Apr 8, 2025 |
| Redhat_linux | — | Upgrade podman-testsUpgrade skopeo-debuginfoUpgrade podman-dockerUpgrade podman-gvproxyUpgrade criu-libs-debuginfoUpgrade runcUpgrade gvisor-tap-vsock-gvforwarderUpgrade grafana-pcp-debugsourceUpgrade slirp4netnsUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade golang-binUpgrade runc-debugsourceUpgrade podman-debuginfoUpgrade conmon-debuginfoUpgrade grafana-debuginfoUpgrade aardvark-dnsUpgrade conmon-debugsourceUpgrade fuse-overlayfsUpgrade podman-tests-debuginfoUpgrade ipp-usbUpgrade gvisor-tap-vsockUpgrade osbuild-composer-debuginfoUpgrade criu-debugsourceUpgrade buildah-testsUpgrade go-toolsetUpgrade golangUpgrade toolbox-debugsourceUpgrade golang-srcUpgrade git-lfs-debuginfoUpgrade python3-podmanUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade osbuild-composer-core-debuginfoUpgrade osbuild-composer-coreUpgrade golang-testsUpgrade cockpit-podmanUpgrade podman-catatonitUpgrade golang-miscUpgrade toolbox-testsUpgrade grafana-pcp-debuginfoUpgrade criu-debuginfoUpgrade weldr-client-debuginfoNo solution existsUpgrade opentelemetry-collectorUpgrade skopeo-debugsourceUpgrade weldr-client-tests-debuginfoUpgrade libslirpUpgrade buildah-tests-debuginfoUpgrade criuUpgrade osbuild-composerUpgrade udicaUpgrade buildahUpgrade netavarkUpgrade containernetworking-plugins-debuginfoUpgrade critUpgrade skopeo-testsUpgrade ipp-usb-debuginfoUpgrade grafana-pcpUpgrade grafanaUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade git-lfs-debugsourceUpgrade grafana-debugsourceUpgrade crunUpgrade weldr-clientUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmonUpgrade toolbox-debuginfoUpgrade podman-remoteUpgrade toolboxUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade osbuild-composer-workerUpgrade delve-debugsourceUpgrade podman-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade delveUpgrade libslirp-debuginfoUpgrade osbuild-composer-debugsourceUpgrade golang-raceUpgrade criu-libsUpgrade runc-debuginfoUpgrade podman-remote-debuginfoUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade osbuild-composer-dnf-jsonUpgrade slirp4netns-debugsourceUpgrade delve-debuginfoUpgrade crun-debugsourceUpgrade gvisor-tap-vsock-debuginfoUpgrade osbuild-composer-tests-debuginfoUpgrade podman-plugins-debuginfoUpgrade weldr-client-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade criu-develUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debugsourceUpgrade crun-debuginfoUpgrade libslirp-develUpgrade container-selinuxUpgrade git-lfsUpgrade libslirp-debugsourceUpgrade golang-docsUpgrade skopeoUpgrade gvisor-tap-vsock-debugsourceUpgrade python3-criuUpgrade grafana-selinuxUpgrade podman | Jun 5, 2025 | Apr 8, 2025 |
| Rocky_linux | — | Upgrade toolboxUpgrade buildah-debugsourceUpgrade gvisor-tap-vsockUpgrade toolbox-testsUpgrade buildah-tests-debuginfoUpgrade skopeo-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-remoteUpgrade criuUpgrade grafana-debuginfoUpgrade gvisor-tap-vsock-debuginfoUpgrade grafana-selinuxUpgrade podman-debuginfoUpgrade golang-raceUpgrade osbuild-composerUpgrade podman-catatonitUpgrade weldr-client-debugsourceUpgrade conmonUpgrade osbuild-composer-coreUpgrade podman-remote-debuginfoUpgrade skopeoUpgrade buildah-debuginfoUpgrade toolbox-debugsourceUpgrade ipp-usb-debuginfoUpgrade podman-catatonit-debuginfoUpgrade conmon-debugsourceUpgrade runcUpgrade critUpgrade podman-tests-debuginfoUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade netavarkUpgrade crunUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade golang-binUpgrade podmanUpgrade containernetworking-plugins-debugsourceUpgrade gvisor-tap-vsock-debugsourceUpgrade criu-debuginfoUpgrade buildahUpgrade criu-libs-debuginfoUpgrade delve-debugsourceUpgrade crun-debugsourceUpgrade podman-pluginsUpgrade grafana-pcpUpgrade grafana-pcp-debuginfoUpgrade golangUpgrade grafana-pcp-debugsourceUpgrade libslirp-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade osbuild-composer-workerUpgrade skopeo-debuginfoUpgrade git-lfsUpgrade conmon-debuginfoUpgrade buildah-testsUpgrade python3-criuUpgrade libslirpUpgrade grafana-debugsourceUpgrade crun-debuginfoUpgrade containers-commonUpgrade toolbox-debuginfoUpgrade runc-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade ipp-usbUpgrade delveUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netnsUpgrade opentelemetry-collectorUpgrade libslirp-develUpgrade weldr-client-debuginfoUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade weldr-clientUpgrade runc-debuginfoUpgrade podman-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade aardvark-dnsUpgrade grafanaUpgrade git-lfs-debugsourceUpgrade libslirp-debugsourceUpgrade podman-testsUpgrade slirp4netns-debuginfoUpgrade gvisor-tap-vsock-gvforwarderUpgrade delve-debuginfoUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade go-toolsetUpgrade podman-plugins-debuginfoUpgrade criu-libsUpgrade criu-develUpgrade criu-debugsourceUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade git-lfs-debuginfo | Jul 31, 2025 | Jul 29, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 9.2.12Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.4.9 | Jul 30, 2026 | Apr 8, 2025 |
| Suse | — | Upgrade go1.23-docUpgrade go1.23-openssl-docUpgrade go1.24Upgrade go1.24-libstdUpgrade go1.23Upgrade govulncheck-vulndbUpgrade go1.24-docUpgrade go1.23-opensslUpgrade go1.24-opensslUpgrade go1.24-raceUpgrade go1.24-openssl-raceUpgrade go1.23-raceUpgrade go1.23-openssl-race | Dec 5, 2025 | Jun 5, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 8, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub