The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Oct 31, 2025 | Oct 29, 2025 |
| Amazon Linux Ami 2 | — | Upgrade containerd-stressUpgrade nerdctlUpgrade golang-testsUpgrade dockerUpgrade nerdctl-debuginfoUpgrade golang-binUpgrade ecs-initUpgrade runcUpgrade golang-docsUpgrade cni-pluginsUpgrade containerdUpgrade golist-debuginfoUpgrade golang-srcUpgrade amazon-ecr-credential-helperUpgrade cri-toolsUpgrade soci-snapshotterUpgrade runfinch-finchUpgrade rcloneUpgrade amazon-cloudwatch-agentUpgrade golistUpgrade rclone-debuginfoUpgrade containerd-debuginfoUpgrade golang-sharedUpgrade oci-add-hooksUpgrade oci-add-hooks-debuginfoUpgrade amazon-ecr-credential-helper-debuginfoUpgrade runc-debuginfoUpgrade golang-miscUpgrade golangUpgrade docker-debuginfoUpgrade cri-tools-debuginfoUpgrade cni-plugins-debuginfoUpgrade amazon-ssm-agent | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade golist-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade golang-sharedUpgrade runc-debuginfoUpgrade runc-debugsourceUpgrade docker-debuginfoUpgrade docker-debugsourceUpgrade cni-plugins-debuginfoUpgrade amazon-ecr-credential-helperUpgrade golang-miscUpgrade ecs-initUpgrade runfinch-finchUpgrade libcap-develUpgrade cni-pluginsUpgrade golangUpgrade libcap-debugsourceUpgrade libcap-debuginfoUpgrade captree-debuginfoUpgrade cni-plugins-debugsourceUpgrade amazon-cloudwatch-agentUpgrade amazon-ssm-agentUpgrade oci-add-hooksUpgrade golistUpgrade containerd-debuginfoUpgrade golang-docsUpgrade oci-add-hooks-debugsourceUpgrade containerdUpgrade golang-binUpgrade nerdctlUpgrade containerd-stress-debuginfoUpgrade golang-testsUpgrade containerd-debugsourceUpgrade soci-snapshotterUpgrade dockerUpgrade libcap-staticUpgrade captreeUpgrade containerd-stressUpgrade golist-debugsourceUpgrade golang-srcUpgrade runcUpgrade libcap | Oct 31, 2025 | Oct 29, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 29, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.2.12Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 10.0.4 | Jul 30, 2026 | Oct 29, 2025 |
| Suse | — | Upgrade go1.25-docUpgrade go1.24Upgrade go1.24-raceUpgrade go1.25-raceUpgrade go1.24-docUpgrade go1.25 | Dec 5, 2025 | Oct 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Oct 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub