The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Oct 31, 2025 | Oct 29, 2025 |
| Amazon Linux Ami 2 | — | Upgrade oci-add-hooksUpgrade oci-add-hooks-debuginfoUpgrade docker-debuginfoUpgrade cri-toolsUpgrade runfinch-finchUpgrade soci-snapshotterUpgrade amazon-cloudwatch-agentUpgrade rcloneUpgrade amazon-ecr-credential-helperUpgrade golang-srcUpgrade cni-plugins-debuginfoUpgrade amazon-ssm-agentUpgrade amazon-ecr-credential-helper-debuginfoUpgrade containerd-debuginfoUpgrade rclone-debuginfoUpgrade runc-debuginfoUpgrade golist-debuginfoUpgrade golangUpgrade golistUpgrade golang-sharedUpgrade cri-tools-debuginfoUpgrade golang-miscUpgrade containerdUpgrade dockerUpgrade nerdctlUpgrade golang-testsUpgrade nerdctl-debuginfoUpgrade ecs-initUpgrade golang-docsUpgrade cni-pluginsUpgrade containerd-stressUpgrade golang-binUpgrade runc | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade captree-debuginfoUpgrade golang-sharedUpgrade golang-miscUpgrade runc-debuginfoUpgrade runfinch-finchUpgrade docker-debuginfoUpgrade docker-debugsourceUpgrade libcap-debuginfoUpgrade cni-pluginsUpgrade ecs-initUpgrade golangUpgrade amazon-ssm-agentUpgrade amazon-ecr-credential-helperUpgrade runc-debugsourceUpgrade libcap-debugsourceUpgrade oci-add-hooksUpgrade golistUpgrade cni-plugins-debugsourceUpgrade cni-plugins-debuginfoUpgrade amazon-cloudwatch-agentUpgrade oci-add-hooks-debuginfoUpgrade libcap-develUpgrade golist-debuginfoUpgrade libcapUpgrade golang-srcUpgrade captreeUpgrade oci-add-hooks-debugsourceUpgrade containerd-stress-debuginfoUpgrade containerd-debuginfoUpgrade nerdctlUpgrade golist-debugsourceUpgrade golang-docsUpgrade runcUpgrade golang-binUpgrade containerd-stressUpgrade containerdUpgrade soci-snapshotterUpgrade golang-testsUpgrade containerd-debugsourceUpgrade libcap-staticUpgrade docker | Oct 31, 2025 | Oct 29, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 29, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 9.2.12 | Jul 30, 2026 | Oct 29, 2025 |
| Suse | — | Upgrade go1.25-docUpgrade go1.24-docUpgrade go1.24-raceUpgrade go1.25-raceUpgrade go1.25Upgrade go1.24 | Dec 5, 2025 | Oct 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Oct 29, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub