The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-pluginsUpgrade libslirpUpgrade toolboxUpgrade criu-develUpgrade podman-testsUpgrade skopeo-testsUpgrade netavarkUpgrade fuse-overlayfsUpgrade grafanaUpgrade podman-gvproxyUpgrade crunUpgrade golang-raceUpgrade delveUpgrade podman-dockerUpgrade golang-miscUpgrade python3-podmanUpgrade slirp4netnsUpgrade buildah-testsUpgrade git-lfsUpgrade cockpit-podmanUpgrade osbuild-composer-coreUpgrade toolbox-testsUpgrade conmonUpgrade go-toolsetUpgrade golang-testsUpgrade weldr-clientUpgrade oci-seccomp-bpf-hookUpgrade skopeoUpgrade container-selinuxUpgrade runcUpgrade criu-libsUpgrade golang-srcUpgrade golang-docsUpgrade python3-criuUpgrade buildahUpgrade containers-commonUpgrade grafana-selinuxUpgrade udicaUpgrade gvisor-tap-vsock-gvforwarderUpgrade opentelemetry-collectorUpgrade podman-remoteUpgrade criuUpgrade golangUpgrade podman-catatonitUpgrade libslirp-develUpgrade critUpgrade gvisor-tap-vsockUpgrade containernetworking-pluginsUpgrade podmanUpgrade osbuild-composer-workerUpgrade osbuild-composerUpgrade aardvark-dnsUpgrade golang-binUpgrade grafana-pcp | Jun 6, 2025 | Apr 8, 2025 |
| Alpine Linux | — | Upgrade go | Aug 8, 2025 | Apr 8, 2025 |
| Amazon Linux Ami 2 | — | Upgrade nerdctlUpgrade rcloneUpgrade golang-srcUpgrade cni-pluginsUpgrade golangUpgrade golang-miscUpgrade dockerUpgrade golang-testsUpgrade docker-debuginfoUpgrade golang-binUpgrade oci-add-hooksUpgrade amazon-ecr-credential-helper-debuginfoUpgrade runfinch-finchUpgrade cni-plugins-debuginfoUpgrade cri-toolsUpgrade oci-add-hooks-debuginfoUpgrade golang-docsUpgrade containerd-stressUpgrade runc-debuginfoUpgrade cri-tools-debuginfoUpgrade golang-sharedUpgrade amazon-ecr-credential-helperUpgrade nerdctl-debuginfoUpgrade amazon-ssm-agentUpgrade amazon-cloudwatch-agentUpgrade soci-snapshotterUpgrade containerd-debuginfoUpgrade rclone-debuginfoUpgrade containerdUpgrade runc | Apr 17, 2025 | Apr 8, 2025 |
| Amazon_linux_2023 | — | Upgrade dockerUpgrade golang-binUpgrade golang-testsUpgrade golang-docsUpgrade runfinch-finchUpgrade oci-add-hooks-debugsourceUpgrade nerdctlUpgrade containerd-stressUpgrade runcUpgrade cni-pluginsUpgrade containerd-stress-debuginfoUpgrade cni-plugins-debuginfoUpgrade containerd-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade oci-add-hooksUpgrade golangUpgrade runc-debugsourceUpgrade runc-debuginfoUpgrade cni-plugins-debugsourceUpgrade amazon-cloudwatch-agentUpgrade docker-debuginfoUpgrade soci-snapshotterUpgrade containerd-debugsourceUpgrade golang-sharedUpgrade golang-miscUpgrade amazon-ecr-credential-helperUpgrade containerdUpgrade docker-debugsourceUpgrade golang-srcUpgrade amazon-ssm-agent | Apr 15, 2025 | Apr 8, 2025 |
| Debian | — | No solution existsUpgrade golang-1.24 | May 15, 2025 | Apr 8, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | May 13, 2025 | Apr 8, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jun 13, 2025 | Apr 8, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jun 11, 2025 | Apr 8, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Dec 12, 2025 | May 12, 2025 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Sep 15, 2025 | May 12, 2025 |
| Oracle_linux | — | Upgrade golang-raceUpgrade netavarkUpgrade criuUpgrade criu-libsUpgrade crunUpgrade golangUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfsUpgrade libslirpUpgrade python3-podmanUpgrade golang-testsUpgrade podman-catatonitUpgrade golang-miscUpgrade libslirp-develUpgrade golang-srcUpgrade osbuild-composer-coreUpgrade podman-dockerUpgrade skopeoUpgrade podman-testsUpgrade podman-pluginsUpgrade conmonUpgrade slirp4netnsUpgrade podmanUpgrade gvisor-tap-vsockUpgrade podman-gvproxyUpgrade buildah-testsUpgrade delveUpgrade golang-docsUpgrade golang-binUpgrade ipp-usbUpgrade containers-commonUpgrade buildahUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade weldr-clientUpgrade osbuild-composer-workerUpgrade grafanaUpgrade python3-criuUpgrade osbuild-composerUpgrade runcUpgrade grafana-selinuxUpgrade udicaUpgrade critUpgrade criu-develUpgrade grafana-pcpUpgrade git-lfsUpgrade cockpit-podmanUpgrade aardvark-dnsUpgrade skopeo-testsUpgrade podman-remoteUpgrade gvisor-tap-vsock-gvforwarderUpgrade go-toolset | Jun 5, 2025 | Apr 8, 2025 |
| Redhat_linux | — | Upgrade podman-remote-debuginfoUpgrade weldr-client-debugsourceUpgrade criu-libsUpgrade podman-plugins-debuginfoUpgrade runc-debuginfoUpgrade git-lfs-debugsourceUpgrade libslirp-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade osbuild-composer-debugsourceUpgrade crunUpgrade crun-debugsourceUpgrade osbuild-composer-dnf-jsonUpgrade skopeo-testsUpgrade critUpgrade golang-raceUpgrade weldr-clientUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade containers-commonUpgrade fuse-overlayfs-debuginfoUpgrade crun-debuginfoUpgrade delveUpgrade gvisor-tap-vsock-debugsourceUpgrade python3-criuUpgrade osbuild-composer-tests-debuginfoUpgrade delve-debuginfoUpgrade criu-develUpgrade containernetworking-plugins-debuginfoUpgrade ipp-usb-debuginfoUpgrade podman-catatonit-debuginfoUpgrade container-selinuxUpgrade podman-gvproxy-debuginfoUpgrade buildah-debugsourceUpgrade gvisor-tap-vsock-debuginfoUpgrade slirp4netns-debugsourceUpgrade toolbox-debuginfoUpgrade conmonUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade podmanUpgrade git-lfsUpgrade toolboxUpgrade delve-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-pluginsUpgrade slirp4netns-debuginfoUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade grafana-debugsourceUpgrade osbuild-composer-workerUpgrade golang-docsUpgrade osbuild-composer-worker-debuginfoUpgrade podman-remoteUpgrade podman-debugsourceUpgrade grafanaUpgrade grafana-selinuxUpgrade libslirp-debugsourceUpgrade skopeoUpgrade grafana-pcpUpgrade buildah-debuginfoUpgrade podman-tests-debuginfoUpgrade netavarkUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade buildahUpgrade skopeo-debuginfoUpgrade podman-dockerUpgrade runcUpgrade podman-testsUpgrade gvisor-tap-vsock-gvforwarderUpgrade criu-libs-debuginfoUpgrade grafana-pcp-debugsourceUpgrade weldr-client-debuginfoUpgrade skopeo-debugsourceUpgrade criu-debuginfoUpgrade weldr-client-tests-debuginfoUpgrade golang-miscNo solution existsUpgrade podman-catatonitUpgrade buildah-testsUpgrade golang-testsUpgrade udicaUpgrade golang-srcUpgrade toolbox-debugsourceUpgrade osbuild-composer-core-debuginfoUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade python3-podmanUpgrade git-lfs-debuginfoUpgrade golangUpgrade go-toolsetUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade golang-binUpgrade criuUpgrade slirp4netnsUpgrade osbuild-composer-debuginfoUpgrade aardvark-dnsUpgrade conmon-debuginfoUpgrade fuse-overlayfsUpgrade ipp-usbUpgrade gvisor-tap-vsockUpgrade grafana-debuginfoUpgrade runc-debugsourceUpgrade criu-debugsourceUpgrade conmon-debugsourceUpgrade podman-debuginfoUpgrade libslirpUpgrade osbuild-composerUpgrade grafana-pcp-debuginfoUpgrade osbuild-composer-coreUpgrade toolbox-testsUpgrade opentelemetry-collector | Jun 5, 2025 | Apr 8, 2025 |
| Rocky_linux | — | Upgrade grafana-selinuxUpgrade fuse-overlayfsUpgrade golang-raceUpgrade podman-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-catatonitUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade crunUpgrade osbuild-composerUpgrade toolbox-debugsourceUpgrade podman-pluginsUpgrade buildahUpgrade golang-binUpgrade conmonUpgrade grafana-pcpUpgrade containernetworking-pluginsUpgrade ipp-usb-debuginfoUpgrade netavarkUpgrade grafana-pcp-debugsourceUpgrade gvisor-tap-vsock-debuginfoUpgrade podman-catatonit-debuginfoUpgrade skopeoUpgrade fuse-overlayfs-debuginfoUpgrade critUpgrade runcUpgrade criuUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade weldr-client-debugsourceUpgrade toolboxUpgrade buildah-debugsourceUpgrade toolbox-testsUpgrade gvisor-tap-vsockUpgrade buildah-tests-debuginfoUpgrade grafana-debuginfoUpgrade skopeo-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade osbuild-composer-coreUpgrade podman-remoteUpgrade podman-tests-debuginfoUpgrade podmanUpgrade criu-libs-debuginfoUpgrade delve-debugsourceUpgrade criu-debuginfoUpgrade crun-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade golangUpgrade gvisor-tap-vsock-debugsourceUpgrade grafana-pcp-debuginfoUpgrade git-lfs-debugsourceUpgrade weldr-client-debuginfoUpgrade slirp4netns-debugsourceUpgrade toolbox-debuginfoUpgrade containers-commonUpgrade runc-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade slirp4netnsUpgrade aardvark-dnsUpgrade libslirp-debugsourceUpgrade grafanaUpgrade podman-plugins-debuginfoUpgrade weldr-clientUpgrade slirp4netns-debuginfoUpgrade skopeo-testsUpgrade podman-testsUpgrade podman-gvproxyUpgrade podman-debugsourceUpgrade gvisor-tap-vsock-gvforwarderUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade go-toolsetUpgrade delve-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade criu-debugsourceUpgrade git-lfs-debuginfoUpgrade criu-libsUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runc-debuginfoUpgrade buildah-testsUpgrade podman-gvproxy-debuginfoUpgrade delveUpgrade osbuild-composer-workerUpgrade libslirp-debuginfoUpgrade opentelemetry-collectorUpgrade ipp-usbUpgrade libslirp-develUpgrade grafana-debugsourceUpgrade git-lfsUpgrade conmon-debuginfoUpgrade skopeo-debuginfoUpgrade python3-criuUpgrade libslirpUpgrade fuse-overlayfs-debugsourceUpgrade crun-debuginfo | Jul 31, 2025 | Jul 29, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 9.2.12Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 9.4.8 | Jul 30, 2026 | Apr 8, 2025 |
| Suse | — | Upgrade go1.24-raceUpgrade go1.23-openssl-raceUpgrade go1.23-raceUpgrade go1.24-openssl-raceUpgrade go1.24-docUpgrade go1.24Upgrade go1.23Upgrade go1.24-opensslUpgrade go1.23-docUpgrade go1.23-opensslUpgrade go1.24-libstdUpgrade go1.23-openssl-docUpgrade govulncheck-vulndb | Dec 5, 2025 | Jun 5, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 8, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub