Every CVE Search/ Get API key

CVE-2025-22871

Request smuggling due to acceptance of invalid chunked data in net/http

9.1 CriticalFix available

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
None

Exploit likelihood

0.84%Up 0.8 points since Apr 9, 2025
90%50%10%1%

What each source reports

CVE List Score used 9.1

Request smuggling due to acceptance of invalid chunked data in net/http

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

Record
CVE-2025-22871
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
EUVDEUVD-2025-11855 9.1

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

Record
EUVD-2025-11855
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-g9pc-8g42-g6vq 9.1

RoadRunner is at risk of HTTP Request/Response Smuggling through vulnerable dependency

The net/http package dependency used by RoadRunner improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

Record
GHSA-g9pc-8g42-g6vq
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-444, CWE-1395
Updated
2026-11-02
NVD 9.1

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

Record
CVE-2025-22871
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVALPINE-CVE-2025-22871 9.1

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

Record
ALPINE-CVE-2025-22871
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-03
OSVBELL-CVE-2025-22871 9.1
Record
BELL-CVE-2025-22871
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2025-22871 9.1

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

Record
DEBIAN-CVE-2025-22871
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVGHSA-g9pc-8g42-g6vq 9.1

RoadRunner is at risk of HTTP Request/Response Smuggling through vulnerable dependency

The net/http package dependency used by RoadRunner improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

Record
GHSA-g9pc-8g42-g6vq
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-1395, CWE-444
Updated
2026-11-02
OSVOESA-2025-2307 9.1

golang security update

.

Security Fix(es):

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.(CVE-2025-22871)

Record
OESA-2025-2307
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVOESA-2025-2308 9.1

golang security update

.

Security Fix(es):

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.(CVE-2025-22871)

Record
OESA-2025-2308
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVOESA-2025-2309 9.1

golang security update

.

Security Fix(es):

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.(CVE-2025-22871)

Record
OESA-2025-2309
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHBA-2025:14817 5.4

Red Hat Bug Fix Advisory: OpenShift Container Platform 4.19.10 packages update

Record
RHBA-2025:14817
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:10271 5.4

Red Hat Security Advisory: OpenShift Container Platform 4.12.78 packages and security update

Record
RHSA-2025:10271
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:10291 5.4

Red Hat Security Advisory: OpenShift Container Platform 4.19.3 packages and security update

Record
RHSA-2025:10291
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:10295 8.3

Red Hat Security Advisory: OpenShift Container Platform 4.17.35 packages and security update

Record
RHSA-2025:10295
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:10768 5.4

Red Hat Security Advisory: OpenShift Container Platform 4.18.20 packages and security update

Record
RHSA-2025:10768
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:10782 5.4

Red Hat Security Advisory: OpenShift Container Platform 4.16.44 packages and security update

Record
RHSA-2025:10782
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:11352 5.4

Red Hat Security Advisory: OpenShift Container Platform 4.15.55 packages and security update

Record
RHSA-2025:11352
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:11678 5.4

Red Hat Security Advisory: OpenShift Container Platform 4.18.21 packages and security update

Record
RHSA-2025:11678
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:11682 5.4

Red Hat Security Advisory: OpenShift Container Platform 4.16.45 packages and security update

Record
RHSA-2025:11682
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:12831 5.4

Red Hat Security Advisory: opentelemetry-collector security update

Record
RHSA-2025:12831
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:12850 5.4

Red Hat Security Advisory: opentelemetry-collector security update

Record
RHSA-2025:12850
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:15291 5.4

Red Hat Security Advisory: OpenShift Container Platform 4.19.11 packages and security update

Record
RHSA-2025:15291
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:21328 8.2

Red Hat Security Advisory: OpenShift Container Platform 4.14.59 packages and security update

Record
RHSA-2025:21328
CVSS 3.1
8.2 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:8476 5.4

Red Hat Security Advisory: golang security update

Record
RHSA-2025:8476
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:8477 5.4

Red Hat Security Advisory: golang security update

Record
RHSA-2025:8477
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:8478 5.4

Red Hat Security Advisory: go-toolset:rhel8 security update

Record
RHSA-2025:8478
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:8539 5.4

Red Hat Security Advisory: containernetworking-plugins security update

Record
RHSA-2025:8539
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:8601 5.4

Red Hat Security Advisory: gvisor-tap-vsock security update

Record
RHSA-2025:8601
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:8632 5.4

Red Hat Security Advisory: buildah security update

Record
RHSA-2025:8632
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:8633 5.4

Red Hat Security Advisory: skopeo security update

Record
RHSA-2025:8633
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:8634 5.4

Red Hat Security Advisory: podman security update

Record
RHSA-2025:8634
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:8665 7.6

Red Hat Security Advisory: grafana security update

Record
RHSA-2025:8665
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2025:8666 5.4

Red Hat Security Advisory: grafana security update

Record
RHSA-2025:8666
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:8667 5.4

Red Hat Security Advisory: grafana security update

Record
RHSA-2025:8667
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:8680 7.6

Red Hat Security Advisory: grafana security update

Record
RHSA-2025:8680
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2025:8682 5.4

Red Hat Security Advisory: grafana security update

Record
RHSA-2025:8682
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:8685 7.6

Red Hat Security Advisory: grafana security update

Record
RHSA-2025:8685
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2025:8689 5.4

Red Hat Security Advisory: golang security update

Record
RHSA-2025:8689
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:8737 5.4

Red Hat Security Advisory: golang security update

Record
RHSA-2025:8737
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:8915 5.4

Red Hat Security Advisory: grafana-pcp security update

Record
RHSA-2025:8915
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:8916 5.4

Red Hat Security Advisory: grafana-pcp security update

Record
RHSA-2025:8916
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:8918 5.4

Red Hat Security Advisory: grafana-pcp security update

Record
RHSA-2025:8918
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:8974 5.4

Red Hat Security Advisory: go-toolset:rhel8 security update

Record
RHSA-2025:8974
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:8975 5.4

Red Hat Security Advisory: grafana-pcp security update

Record
RHSA-2025:8975
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:8982 5.4

Red Hat Security Advisory: grafana-pcp security update

Record
RHSA-2025:8982
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:8983 5.4

Red Hat Security Advisory: grafana-pcp security update

Record
RHSA-2025:8983
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:8984 5.4

Red Hat Security Advisory: grafana-pcp security update

Record
RHSA-2025:8984
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:9017 5.4

Red Hat Security Advisory: buildah security update

Record
RHSA-2025:9017
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:9018 5.4

Red Hat Security Advisory: skopeo security update

Record
RHSA-2025:9018
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:9019 5.4

Red Hat Security Advisory: containernetworking-plugins security update

Record
RHSA-2025:9019
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:9020 5.4

Red Hat Security Advisory: podman security update

Record
RHSA-2025:9020
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:9025 5.4

Red Hat Security Advisory: container-tools:rhel8 security update

Record
RHSA-2025:9025
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:9043 5.4

Red Hat Security Advisory: golang security update

Record
RHSA-2025:9043
CVSS 3.1
5.4 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
spiral/roadrunner
Packagist
 before 2025.1.0
2025.1.0
go
Alpine:v3.21
 before 1.23.8-r0
1.23.8-r0
go
Alpine:v3.22
 before 1.24.2-r0
1.24.2-r0
go
Alpine:v3.23
 before 1.24.2-r0
1.24.2-r0
go
Alpine:v3.24
 before 1.24.2-r0
1.24.2-r0
opentelemetry-collector
AlmaLinux:9
 before 0.127.0-1.el9_6
0.127.0-1.el9_6
opentelemetry-collector
AlmaLinux:10
 before 0.127.0-1.el10_0
0.127.0-1.el10_0
go-toolset
AlmaLinux:9
 before 1.23.9-1.el9_6
1.23.9-1.el9_6
golang
AlmaLinux:9
 before 1.23.9-1.el9_6
1.23.9-1.el9_6
golang-bin
AlmaLinux:9
 before 1.23.9-1.el9_6
1.23.9-1.el9_6
Show 290 moreShow less
Affected packages
PackageAffectedFixed
golang-docs
AlmaLinux:9
 before 1.23.9-1.el9_6
1.23.9-1.el9_6
golang-misc
AlmaLinux:9
 before 1.23.9-1.el9_6
1.23.9-1.el9_6
golang-race
AlmaLinux:9
 before 1.23.9-1.el9_6
1.23.9-1.el9_6
golang-src
AlmaLinux:9
 before 1.23.9-1.el9_6
1.23.9-1.el9_6
golang-tests
AlmaLinux:9
 before 1.23.9-1.el9_6
1.23.9-1.el9_6
golang-docs
AlmaLinux:10
 before 1.23.9-1.el10_0.alma.1
1.23.9-1.el10_0.alma.1
golang-misc
AlmaLinux:10
 before 1.23.9-1.el10_0.alma.1
1.23.9-1.el10_0.alma.1
golang-src
AlmaLinux:10
 before 1.23.9-1.el10_0.alma.1
1.23.9-1.el10_0.alma.1
golang-tests
AlmaLinux:10
 before 1.23.9-1.el10_0.alma.1
1.23.9-1.el10_0.alma.1
delve
AlmaLinux:8
 before 1.24.1-1.module_el8.10.0+3977+66935a26
1.24.1-1.module_el8.10.0+3977+66935a26
go-toolset
AlmaLinux:8
 before 1.23.9-1.module_el8.10.0+4000+1ad1b2cc
1.23.9-1.module_el8.10.0+4000+1ad1b2cc
golang
AlmaLinux:8
 before 1.23.9-1.module_el8.10.0+4000+1ad1b2cc
1.23.9-1.module_el8.10.0+4000+1ad1b2cc
golang-bin
AlmaLinux:8
 before 1.23.9-1.module_el8.10.0+4000+1ad1b2cc
1.23.9-1.module_el8.10.0+4000+1ad1b2cc
golang-docs
AlmaLinux:8
 before 1.23.9-1.module_el8.10.0+4000+1ad1b2cc
1.23.9-1.module_el8.10.0+4000+1ad1b2cc
golang-misc
AlmaLinux:8
 before 1.23.9-1.module_el8.10.0+4000+1ad1b2cc
1.23.9-1.module_el8.10.0+4000+1ad1b2cc
golang-src
AlmaLinux:8
 before 1.23.9-1.module_el8.10.0+4000+1ad1b2cc
1.23.9-1.module_el8.10.0+4000+1ad1b2cc
golang-tests
AlmaLinux:8
 before 1.23.9-1.module_el8.10.0+4000+1ad1b2cc
1.23.9-1.module_el8.10.0+4000+1ad1b2cc
grafana
AlmaLinux:10
 before 10.2.6-18.el10_0
10.2.6-18.el10_0
grafana-selinux
AlmaLinux:10
 before 10.2.6-18.el10_0
10.2.6-18.el10_0
grafana
AlmaLinux:8
 before 9.2.10-25.el8_10
9.2.10-25.el8_10
grafana-selinux
AlmaLinux:8
 before 9.2.10-25.el8_10
9.2.10-25.el8_10
grafana
AlmaLinux:9
 before 10.2.6-14.el9_6
10.2.6-14.el9_6
grafana-selinux
AlmaLinux:9
 before 10.2.6-14.el9_6
10.2.6-14.el9_6
grafana-pcp
AlmaLinux:10
 before 5.2.2-3.el10_0
5.2.2-3.el10_0
grafana-pcp
AlmaLinux:9
 before 5.1.1-11.el9_6
5.1.1-11.el9_6
grafana-pcp
AlmaLinux:8
 before 5.1.1-10.el8_10
5.1.1-10.el8_10
git-lfs
AlmaLinux:8
 before 3.4.1-5.el8_10
3.4.1-5.el8_10
git-lfs
AlmaLinux:10
 before 3.6.1-2.el10_0
3.6.1-2.el10_0
git-lfs
AlmaLinux:9
 before 3.6.1-2.el9_6
3.6.1-2.el9_6
aardvark-dns
AlmaLinux:8
 before 2:1.10.1-2.module_el8.10.0+4016+efd18bf8
2:1.10.1-2.module_el8.10.0+4016+efd18bf8
aardvark-dns
AlmaLinux:8
 before 2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7
2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7
aardvark-dns
AlmaLinux:8
 before 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7
2:1.10.1-2.module_el8.10.0+3901+4b80ecd7
buildah
AlmaLinux:8
 before 2:1.33.12-2.module_el8.10.0+4016+efd18bf8
2:1.33.12-2.module_el8.10.0+4016+efd18bf8
buildah-tests
AlmaLinux:8
 before 2:1.33.12-2.module_el8.10.0+4016+efd18bf8
2:1.33.12-2.module_el8.10.0+4016+efd18bf8
cockpit-podman
AlmaLinux:8
 before 84.1-1.module_el8.10.0+4016+efd18bf8
84.1-1.module_el8.10.0+4016+efd18bf8
conmon
AlmaLinux:8
 before 3:2.1.10-1.module_el8.10.0+3970+8445edf6
3:2.1.10-1.module_el8.10.0+3970+8445edf6
container-selinux
AlmaLinux:8
 before 2:2.229.0-2.module_el8.10.0+3909+6e1c1eb7
2:2.229.0-2.module_el8.10.0+3909+6e1c1eb7
containernetworking-plugins
AlmaLinux:8
 before 1:1.4.0-6.module_el8.10.0+4016+efd18bf8
1:1.4.0-6.module_el8.10.0+4016+efd18bf8
containers-common
AlmaLinux:8
 before 2:1-82.module_el8.10.0+3970+8445edf6
2:1-82.module_el8.10.0+3970+8445edf6
containers-common
AlmaLinux:8
 before 2:1-82.module_el8.10.0+3876+e55593a8
2:1-82.module_el8.10.0+3876+e55593a8
containers-common
AlmaLinux:8
 before 2:1-82.module_el8.10.0+3901+4b80ecd7
2:1-82.module_el8.10.0+3901+4b80ecd7
crit
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3901+4b80ecd7
3.18-5.module_el8.10.0+3901+4b80ecd7
crit
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3845+87b84552
3.18-5.module_el8.10.0+3845+87b84552
crit
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3858+6ad51f9f
3.18-5.module_el8.10.0+3858+6ad51f9f
criu
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3926+f12484f5
3.18-5.module_el8.10.0+3926+f12484f5
criu
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3876+e55593a8
3.18-5.module_el8.10.0+3876+e55593a8
criu
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3970+8445edf6
3.18-5.module_el8.10.0+3970+8445edf6
criu
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3909+6e1c1eb7
3.18-5.module_el8.10.0+3909+6e1c1eb7
criu-devel
AlmaLinux:8
 before 3.18-5.module_el8.10.0+4016+efd18bf8
3.18-5.module_el8.10.0+4016+efd18bf8
criu-devel
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3876+e55593a8
3.18-5.module_el8.10.0+3876+e55593a8
criu-devel
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3858+6ad51f9f
3.18-5.module_el8.10.0+3858+6ad51f9f
criu-libs
AlmaLinux:8
 before 3.18-5.module_el8.10.0+4016+efd18bf8
3.18-5.module_el8.10.0+4016+efd18bf8
criu-libs
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3970+8445edf6
3.18-5.module_el8.10.0+3970+8445edf6
criu-libs
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3926+f12484f5
3.18-5.module_el8.10.0+3926+f12484f5
criu-libs
AlmaLinux:8
 before 3.18-5.module_el8.10.0+3909+6e1c1eb7
3.18-5.module_el8.10.0+3909+6e1c1eb7
crun
AlmaLinux:8
 before 1.14.3-2.module_el8.10.0+3845+87b84552
1.14.3-2.module_el8.10.0+3845+87b84552
crun
AlmaLinux:8
 before 1.14.3-2.module_el8.10.0+3909+6e1c1eb7
1.14.3-2.module_el8.10.0+3909+6e1c1eb7
crun
AlmaLinux:8
 before 1.14.3-2.module_el8.10.0+3926+f12484f5
1.14.3-2.module_el8.10.0+3926+f12484f5
msft-golang
Azure Linux:2
 before 1.24.1-2
1.24.1-2
golang
Azure Linux:2
 1.18.0 up to 1.18.8-7
1.18.8-7
golang
Azure Linux:2
 1.19.0 up to 1.22.7-3
1.22.7-3
golang
Azure Linux:3
 through 1.26.10-1 None known
golang
Azure Linux:3
 1.27.0 to 1.27.1-1 None known
go
Alpaquita:23
 1.19.7-r0 up to 1.23.8-r0
1.23.8-r0
go
Alpaquita:stream
 1.20.5-r2 up to 1.24.2-r0
1.24.2-r0
go
BellSoft Hardened Containers:23
 1.19.7-r0 up to 1.23.8-r0
1.23.8-r0
go
BellSoft Hardened Containers:stream
 1.20.5-r2 up to 1.24.2-r0
1.24.2-r0
golang
Bitnami
 before 1.23.8, 1.24.0-0 up to 1.24.2
1.23.81.24.2
golang-1.19
Debian:12
 All versions, plus listed versions
1.19.10-11.19.10-21.19.11-11.19.12-11.19.12-2
Show 7 moreShow less
1.19.12-2~bpo11+11.19.12-2~bpo12+11.19.13-11.19.13-1~bpo11+11.19.13-1~bpo12+11.19.8-21.19.9-1
 None known
golang-1.24
Debian:13
 before 1.24.2-1
1.24.2-1
spiral/roadrunner
Packagist
 before 2025.1.0, plus listed versions
v0.9.0v1.0.0v1.0.1v1.0.2v1.0.3
Show 45 moreShow less
v1.0.5v1.1.0v1.1.1v1.2.0v1.2.1v1.2.2v1.2.3v1.2.4v1.2.5v1.2.6v1.2.7v1.2.8v1.3.0v1.3.1v1.3.2v1.3.3v1.3.4v1.3.5v1.3.6v1.3.7v1.4.0v1.4.1v1.4.2v1.4.3v1.4.4v1.4.5v1.4.6v1.4.7v1.4.8v1.5.0v1.5.1v1.5.2v1.5.3v1.6.0v1.6.1v1.6.2v1.6.3v1.6.4v1.7.0v1.7.1v1.8.0v1.8.1v1.8.2v1.8.3v1.8.4
2025.1.0
stdlib
Go
 before 1.23.8, 1.24.0-0 up to 1.24.2
1.23.81.24.2
golang
Mageia:9
From an advisory covering 2 CVEs
 before 1.23.8-1.mga9
1.23.8-1.mga9
golang
openEuler:24.03-LTS
 before 1.21.4-37.oe2403
1.21.4-37.oe2403
golang
openEuler:24.03-LTS-SP1
 before 1.21.4-37.oe2403sp1
1.21.4-37.oe2403sp1
golang
openEuler:24.03-LTS-SP2
 before 1.21.4-37.oe2403sp2
1.21.4-37.oe2403sp2
ose-aws-ecr-image-credential-provider
Red Hat:openshift:4.19::el9
 before 0:4.19.0-202508252101.p2.g425c1c5.assembly.stream.el9
0:4.19.0-202508252101.p2.g425c1c5.assembly.stream.el9
ose-azure-acr-image-credential-provider
Red Hat:openshift:4.19::el9
 before 0:4.19.0-202508252101.p2.g7109d6b.assembly.stream.el9
0:4.19.0-202508252101.p2.g7109d6b.assembly.stream.el9
ose-gcp-gcr-image-credential-provider
Red Hat:openshift:4.19::el9
 before 0:4.19.0-202508252101.p2.gd8d3aeb.assembly.stream.el9
0:4.19.0-202508252101.p2.gd8d3aeb.assembly.stream.el9
cri-o
Red Hat:openshift:4.12::el8
 before 0:1.25.5-31.rhaos4.12.git53dc492.el8
0:1.25.5-31.rhaos4.12.git53dc492.el8
cri-o-debuginfo
Red Hat:openshift:4.12::el8
 before 0:1.25.5-31.rhaos4.12.git53dc492.el8
0:1.25.5-31.rhaos4.12.git53dc492.el8
cri-o-debugsource
Red Hat:openshift:4.12::el8
 before 0:1.25.5-31.rhaos4.12.git53dc492.el8
0:1.25.5-31.rhaos4.12.git53dc492.el8
cri-tools
Red Hat:openshift:4.12::el8
 before 0:1.25.0-6.el8
0:1.25.0-6.el8
cri-tools-debuginfo
Red Hat:openshift:4.12::el8
 before 0:1.25.0-6.el8
0:1.25.0-6.el8
cri-tools-debugsource
Red Hat:openshift:4.12::el8
 before 0:1.25.0-6.el8
0:1.25.0-6.el8
kata-containers
Red Hat:openshift:4.19::el9
 before 0:3.13.0-2.rhaos4.20.el9
0:3.13.0-2.rhaos4.20.el9
podman
Red Hat:openshift:4.17::el8
From an advisory covering 2 CVEs
 before 5:5.2.2-8.rhaos4.17.el8
5:5.2.2-8.rhaos4.17.el8
podman-catatonit
Red Hat:openshift:4.17::el8
From an advisory covering 2 CVEs
 before 5:5.2.2-8.rhaos4.17.el8
5:5.2.2-8.rhaos4.17.el8
podman-catatonit-debuginfo
Red Hat:openshift:4.17::el8
From an advisory covering 2 CVEs
 before 5:5.2.2-8.rhaos4.17.el8
5:5.2.2-8.rhaos4.17.el8
podman-debuginfo
Red Hat:openshift:4.17::el8
From an advisory covering 2 CVEs
 before 5:5.2.2-8.rhaos4.17.el8
5:5.2.2-8.rhaos4.17.el8
podman-debugsource
Red Hat:openshift:4.17::el8
From an advisory covering 2 CVEs
 before 5:5.2.2-8.rhaos4.17.el8
5:5.2.2-8.rhaos4.17.el8
podman-docker
Red Hat:openshift:4.17::el8
From an advisory covering 2 CVEs
 before 5:5.2.2-8.rhaos4.17.el8
5:5.2.2-8.rhaos4.17.el8
podman-gvproxy
Red Hat:openshift:4.17::el8
From an advisory covering 2 CVEs
 before 5:5.2.2-8.rhaos4.17.el8
5:5.2.2-8.rhaos4.17.el8
podman-gvproxy-debuginfo
Red Hat:openshift:4.17::el8
From an advisory covering 2 CVEs
 before 5:5.2.2-8.rhaos4.17.el8
5:5.2.2-8.rhaos4.17.el8
podman-plugins
Red Hat:openshift:4.17::el8
From an advisory covering 2 CVEs
 before 5:5.2.2-8.rhaos4.17.el8
5:5.2.2-8.rhaos4.17.el8
podman-plugins-debuginfo
Red Hat:openshift:4.17::el8
From an advisory covering 2 CVEs
 before 5:5.2.2-8.rhaos4.17.el8
5:5.2.2-8.rhaos4.17.el8
podman-remote
Red Hat:openshift:4.17::el8
From an advisory covering 2 CVEs
 before 5:5.2.2-8.rhaos4.17.el8
5:5.2.2-8.rhaos4.17.el8
podman-remote-debuginfo
Red Hat:openshift:4.17::el8
From an advisory covering 2 CVEs
 before 5:5.2.2-8.rhaos4.17.el8
5:5.2.2-8.rhaos4.17.el8
podman-tests
Red Hat:openshift:4.17::el8
From an advisory covering 2 CVEs
 before 5:5.2.2-8.rhaos4.17.el8
5:5.2.2-8.rhaos4.17.el8
podman
Red Hat:openshift:4.17::el9
From an advisory covering 2 CVEs
 before 5:5.2.2-8.rhaos4.17.el9
5:5.2.2-8.rhaos4.17.el9
podman-debuginfo
Red Hat:openshift:4.17::el9
From an advisory covering 2 CVEs
 before 5:5.2.2-8.rhaos4.17.el9
5:5.2.2-8.rhaos4.17.el9
podman-debugsource
Red Hat:openshift:4.17::el9
From an advisory covering 2 CVEs
 before 5:5.2.2-8.rhaos4.17.el9
5:5.2.2-8.rhaos4.17.el9
podman-docker
Red Hat:openshift:4.17::el9
From an advisory covering 2 CVEs
 before 5:5.2.2-8.rhaos4.17.el9
5:5.2.2-8.rhaos4.17.el9
podman-plugins
Red Hat:openshift:4.17::el9
From an advisory covering 2 CVEs
 before 5:5.2.2-8.rhaos4.17.el9
5:5.2.2-8.rhaos4.17.el9
podman-plugins-debuginfo
Red Hat:openshift:4.17::el9
From an advisory covering 2 CVEs
 before 5:5.2.2-8.rhaos4.17.el9
5:5.2.2-8.rhaos4.17.el9
podman-remote
Red Hat:openshift:4.17::el9
From an advisory covering 2 CVEs
 before 5:5.2.2-8.rhaos4.17.el9
5:5.2.2-8.rhaos4.17.el9
podman-remote-debuginfo
Red Hat:openshift:4.17::el9
From an advisory covering 2 CVEs
 before 5:5.2.2-8.rhaos4.17.el9
5:5.2.2-8.rhaos4.17.el9
podman-tests
Red Hat:openshift:4.17::el9
From an advisory covering 2 CVEs
 before 5:5.2.2-8.rhaos4.17.el9
5:5.2.2-8.rhaos4.17.el9
containernetworking-plugins
Red Hat:openshift:4.17::el8
From an advisory covering 2 CVEs
 before 1:1.4.0-5.rhaos4.17.el8
1:1.4.0-5.rhaos4.17.el8
containernetworking-plugins-debuginfo
Red Hat:openshift:4.17::el8
From an advisory covering 2 CVEs
 before 1:1.4.0-5.rhaos4.17.el8
1:1.4.0-5.rhaos4.17.el8
containernetworking-plugins-debugsource
Red Hat:openshift:4.17::el8
From an advisory covering 2 CVEs
 before 1:1.4.0-5.rhaos4.17.el8
1:1.4.0-5.rhaos4.17.el8
cri-o
Red Hat:openshift:4.17::el8
From an advisory covering 2 CVEs
 before 0:1.30.14-3.rhaos4.17.git0a197ae.el8
0:1.30.14-3.rhaos4.17.git0a197ae.el8
cri-o-debuginfo
Red Hat:openshift:4.17::el8
From an advisory covering 2 CVEs
 before 0:1.30.14-3.rhaos4.17.git0a197ae.el8
0:1.30.14-3.rhaos4.17.git0a197ae.el8
cri-o-debugsource
Red Hat:openshift:4.17::el8
From an advisory covering 2 CVEs
 before 0:1.30.14-3.rhaos4.17.git0a197ae.el8
0:1.30.14-3.rhaos4.17.git0a197ae.el8
cri-tools
Red Hat:openshift:4.17::el8
From an advisory covering 2 CVEs
 before 0:1.30.0-6.el8
0:1.30.0-6.el8
cri-tools-debuginfo
Red Hat:openshift:4.17::el8
From an advisory covering 2 CVEs
 before 0:1.30.0-6.el8
0:1.30.0-6.el8
cri-tools-debugsource
Red Hat:openshift:4.17::el8
From an advisory covering 2 CVEs
 before 0:1.30.0-6.el8
0:1.30.0-6.el8
skopeo
Red Hat:openshift:4.17::el8
From an advisory covering 2 CVEs
 before 2:1.16.1-2.rhaos4.17.el8
2:1.16.1-2.rhaos4.17.el8
skopeo-tests
Red Hat:openshift:4.17::el8
From an advisory covering 2 CVEs
 before 2:1.16.1-2.rhaos4.17.el8
2:1.16.1-2.rhaos4.17.el8
cri-o
Red Hat:openshift:4.17::el9
From an advisory covering 2 CVEs
 before 0:1.30.14-3.rhaos4.17.git0a197ae.el9
0:1.30.14-3.rhaos4.17.git0a197ae.el9
cri-o-debuginfo
Red Hat:openshift:4.17::el9
From an advisory covering 2 CVEs
 before 0:1.30.14-3.rhaos4.17.git0a197ae.el9
0:1.30.14-3.rhaos4.17.git0a197ae.el9
cri-o-debugsource
Red Hat:openshift:4.17::el9
From an advisory covering 2 CVEs
 before 0:1.30.14-3.rhaos4.17.git0a197ae.el9
0:1.30.14-3.rhaos4.17.git0a197ae.el9
cri-tools
Red Hat:openshift:4.17::el9
From an advisory covering 2 CVEs
 before 0:1.30.0-6.el9
0:1.30.0-6.el9
cri-tools-debuginfo
Red Hat:openshift:4.17::el9
From an advisory covering 2 CVEs
 before 0:1.30.0-6.el9
0:1.30.0-6.el9
cri-tools-debugsource
Red Hat:openshift:4.17::el9
From an advisory covering 2 CVEs
 before 0:1.30.0-6.el9
0:1.30.0-6.el9
skopeo
Red Hat:openshift:4.17::el9
From an advisory covering 2 CVEs
 before 2:1.16.1-2.rhaos4.17.el9
2:1.16.1-2.rhaos4.17.el9
skopeo-debuginfo
Red Hat:openshift:4.17::el9
From an advisory covering 2 CVEs
 before 2:1.16.1-2.rhaos4.17.el9
2:1.16.1-2.rhaos4.17.el9
skopeo-debugsource
Red Hat:openshift:4.17::el9
From an advisory covering 2 CVEs
 before 2:1.16.1-2.rhaos4.17.el9
2:1.16.1-2.rhaos4.17.el9
skopeo-tests
Red Hat:openshift:4.17::el9
From an advisory covering 2 CVEs
 before 2:1.16.1-2.rhaos4.17.el9
2:1.16.1-2.rhaos4.17.el9
cri-tools
Red Hat:openshift:4.18::el8
 before 0:1.31.1-4.el8
0:1.31.1-4.el8
cri-tools-debuginfo
Red Hat:openshift:4.18::el8
 before 0:1.31.1-4.el8
0:1.31.1-4.el8
cri-tools-debugsource
Red Hat:openshift:4.18::el8
 before 0:1.31.1-4.el8
0:1.31.1-4.el8
openshift
Red Hat:openshift:4.18::el8
 before 0:4.18.0-202507051134.p0.g817e6dd.assembly.stream.el8
0:4.18.0-202507051134.p0.g817e6dd.assembly.stream.el8
openshift-clients
Red Hat:openshift:4.18::el8
 before 0:4.18.0-202507080904.p0.g4fcb2d0.assembly.stream.el8
0:4.18.0-202507080904.p0.g4fcb2d0.assembly.stream.el8
openshift-clients-redistributable
Red Hat:openshift:4.18::el8
 before 0:4.18.0-202507080904.p0.g4fcb2d0.assembly.stream.el8
0:4.18.0-202507080904.p0.g4fcb2d0.assembly.stream.el8
openshift-hyperkube
Red Hat:openshift:4.18::el8
 before 0:4.18.0-202507051134.p0.g817e6dd.assembly.stream.el8
0:4.18.0-202507051134.p0.g817e6dd.assembly.stream.el8
openshift-kube-apiserver
Red Hat:openshift:4.18::el8
 before 0:4.18.0-202507051134.p0.g817e6dd.assembly.stream.el8
0:4.18.0-202507051134.p0.g817e6dd.assembly.stream.el8
openshift-kube-controller-manager
Red Hat:openshift:4.18::el8
 before 0:4.18.0-202507051134.p0.g817e6dd.assembly.stream.el8
0:4.18.0-202507051134.p0.g817e6dd.assembly.stream.el8
opentelemetry-collector
Rocky Linux:9
 before 0:0.127.0-1.el9_6
0:0.127.0-1.el9_6
opentelemetry-collector
Rocky Linux:10
 before 0:0.127.0-1.el10_0
0:0.127.0-1.el10_0
golang
Rocky Linux:9
 before 0:1.23.9-1.el9_6
0:1.23.9-1.el9_6
golang
Rocky Linux:10
 before 0:1.23.9-1.el10_0
0:1.23.9-1.el10_0
delve
Rocky Linux:8
 before 0:1.24.1-1.module+el8.10.0+1951+c74bd827
0:1.24.1-1.module+el8.10.0+1951+c74bd827
delve
Rocky Linux:8
 before 0:1.24.1-1.module+el8.10.0+1987+42f155bb
0:1.24.1-1.module+el8.10.0+1987+42f155bb
golang
Rocky Linux:8
 before 0:1.23.9-1.module+el8.10.0+1987+42f155bb
0:1.23.9-1.module+el8.10.0+1987+42f155bb
go-toolset
Rocky Linux:8
 before 0:1.23.9-1.module+el8.10.0+1987+42f155bb
0:1.23.9-1.module+el8.10.0+1987+42f155bb
grafana
Rocky Linux:10
 before 0:10.2.6-18.el10_0
0:10.2.6-18.el10_0
grafana
Rocky Linux:8
 before 0:9.2.10-25.el8_10
0:9.2.10-25.el8_10
grafana
Rocky Linux:9
 before 0:10.2.6-14.el9_6
0:10.2.6-14.el9_6
grafana-pcp
Rocky Linux:10
 before 0:5.2.2-3.el10_0
0:5.2.2-3.el10_0
grafana-pcp
Rocky Linux:9
 before 0:5.1.1-11.el9_6
0:5.1.1-11.el9_6
grafana-pcp
Rocky Linux:8
 before 0:5.1.1-10.el8_10
0:5.1.1-10.el8_10
git-lfs
Rocky Linux:8
 before 0:3.4.1-5.el8_10
0:3.4.1-5.el8_10
git-lfs
Rocky Linux:10
 before 0:3.6.1-2.el10_0
0:3.6.1-2.el10_0
git-lfs
Rocky Linux:9
 before 0:3.6.1-2.el9_6
0:3.6.1-2.el9_6
aardvark-dns
Rocky Linux:8
 before 2:1.10.1-2.module+el8.10.0+1874+ce489889
2:1.10.1-2.module+el8.10.0+1874+ce489889
aardvark-dns
Rocky Linux:8
 before 2:1.10.1-2.module+el8.10.0+1880+8e896d1b
2:1.10.1-2.module+el8.10.0+1880+8e896d1b
aardvark-dns
Rocky Linux:8
 before 2:1.10.1-2.module+el8.10.0+1896+b18fa106
2:1.10.1-2.module+el8.10.0+1896+b18fa106
aardvark-dns
Rocky Linux:8
 before 2:1.10.1-2.module+el8.10.0+1948+4b5cd4a9
2:1.10.1-2.module+el8.10.0+1948+4b5cd4a9
aardvark-dns
Rocky Linux:8
 before 2:1.10.1-2.module+el8.10.0+2001+6a33db9f
2:1.10.1-2.module+el8.10.0+2001+6a33db9f
conmon
Rocky Linux:8
 before 3:2.1.10-1.module+el8.10.0+1880+8e896d1b
3:2.1.10-1.module+el8.10.0+1880+8e896d1b
conmon
Rocky Linux:8
 before 3:2.1.10-1.module+el8.10.0+1874+ce489889
3:2.1.10-1.module+el8.10.0+1874+ce489889
conmon
Rocky Linux:8
 before 3:2.1.10-1.module+el8.10.0+1896+b18fa106
3:2.1.10-1.module+el8.10.0+1896+b18fa106
conmon
Rocky Linux:8
 before 3:2.1.10-1.module+el8.10.0+1948+4b5cd4a9
3:2.1.10-1.module+el8.10.0+1948+4b5cd4a9
conmon
Rocky Linux:8
 before 3:2.1.10-1.module+el8.10.0+2001+6a33db9f
3:2.1.10-1.module+el8.10.0+2001+6a33db9f
conmon
Rocky Linux:8
 before 3:2.1.10-1.module+el8.10.0+1815+5fe7415e
3:2.1.10-1.module+el8.10.0+1815+5fe7415e
conmon
Rocky Linux:8
 before 3:2.1.10-1.module+el8.10.0+1843+6892ab28
3:2.1.10-1.module+el8.10.0+1843+6892ab28
conmon
Rocky Linux:8
 before 3:2.1.10-1.module+el8.10.0+1872+2e18eb19
3:2.1.10-1.module+el8.10.0+1872+2e18eb19
buildah
Rocky Linux:8
 before 2:1.33.12-2.module+el8.10.0+2001+6a33db9f
2:1.33.12-2.module+el8.10.0+2001+6a33db9f
cockpit-podman
Rocky Linux:8
 before 0:84.1-1.module+el8.10.0+1815+5fe7415e
0:84.1-1.module+el8.10.0+1815+5fe7415e
cockpit-podman
Rocky Linux:8
 before 0:84.1-1.module+el8.10.0+1825+623b0c20
0:84.1-1.module+el8.10.0+1825+623b0c20
cockpit-podman
Rocky Linux:8
 before 0:84.1-1.module+el8.10.0+1843+6892ab28
0:84.1-1.module+el8.10.0+1843+6892ab28
cockpit-podman
Rocky Linux:8
 before 0:84.1-1.module+el8.10.0+1872+2e18eb19
0:84.1-1.module+el8.10.0+1872+2e18eb19
cockpit-podman
Rocky Linux:8
 before 0:84.1-1.module+el8.10.0+1874+ce489889
0:84.1-1.module+el8.10.0+1874+ce489889
cockpit-podman
Rocky Linux:8
 before 0:84.1-1.module+el8.10.0+1880+8e896d1b
0:84.1-1.module+el8.10.0+1880+8e896d1b
cockpit-podman
Rocky Linux:8
 before 0:84.1-1.module+el8.10.0+1896+b18fa106
0:84.1-1.module+el8.10.0+1896+b18fa106
cockpit-podman
Rocky Linux:8
 before 0:84.1-1.module+el8.10.0+1948+4b5cd4a9
0:84.1-1.module+el8.10.0+1948+4b5cd4a9
cockpit-podman
Rocky Linux:8
 before 0:84.1-1.module+el8.10.0+2001+6a33db9f
0:84.1-1.module+el8.10.0+2001+6a33db9f
containernetworking-plugins
Rocky Linux:8
 before 1:1.4.0-6.module+el8.10.0+2001+6a33db9f
1:1.4.0-6.module+el8.10.0+2001+6a33db9f
containers-common
Rocky Linux:8
 before 2:1-82.module+el8.10.0+1843+6892ab28
2:1-82.module+el8.10.0+1843+6892ab28
containers-common
Rocky Linux:8
 before 2:1-82.module+el8.10.0+1872+2e18eb19
2:1-82.module+el8.10.0+1872+2e18eb19
containers-common
Rocky Linux:8
 before 2:1-82.module+el8.10.0+1874+ce489889
2:1-82.module+el8.10.0+1874+ce489889
containers-common
Rocky Linux:8
 before 2:1-82.module+el8.10.0+1880+8e896d1b
2:1-82.module+el8.10.0+1880+8e896d1b
containers-common
Rocky Linux:8
 before 2:1-82.module+el8.10.0+1896+b18fa106
2:1-82.module+el8.10.0+1896+b18fa106
containers-common
Rocky Linux:8
 before 2:1-82.module+el8.10.0+1948+4b5cd4a9
2:1-82.module+el8.10.0+1948+4b5cd4a9
containers-common
Rocky Linux:8
 before 2:1-82.module+el8.10.0+2001+6a33db9f
2:1-82.module+el8.10.0+2001+6a33db9f
container-selinux
Rocky Linux:8
 before 2:2.229.0-2.module+el8.10.0+1815+5fe7415e
2:2.229.0-2.module+el8.10.0+1815+5fe7415e
container-selinux
Rocky Linux:8
 before 2:2.229.0-2.module+el8.10.0+1825+623b0c20
2:2.229.0-2.module+el8.10.0+1825+623b0c20
container-selinux
Rocky Linux:8
 before 2:2.229.0-2.module+el8.10.0+1843+6892ab28
2:2.229.0-2.module+el8.10.0+1843+6892ab28
container-selinux
Rocky Linux:8
 before 2:2.229.0-2.module+el8.10.0+1872+2e18eb19
2:2.229.0-2.module+el8.10.0+1872+2e18eb19
container-selinux
Rocky Linux:8
 before 2:2.229.0-2.module+el8.10.0+1874+ce489889
2:2.229.0-2.module+el8.10.0+1874+ce489889
container-selinux
Rocky Linux:8
 before 2:2.229.0-2.module+el8.10.0+1880+8e896d1b
2:2.229.0-2.module+el8.10.0+1880+8e896d1b
container-selinux
Rocky Linux:8
 before 2:2.229.0-2.module+el8.10.0+1896+b18fa106
2:2.229.0-2.module+el8.10.0+1896+b18fa106
container-selinux
Rocky Linux:8
 before 2:2.229.0-2.module+el8.10.0+1948+4b5cd4a9
2:2.229.0-2.module+el8.10.0+1948+4b5cd4a9
container-selinux
Rocky Linux:8
 before 2:2.229.0-2.module+el8.10.0+2001+6a33db9f
2:2.229.0-2.module+el8.10.0+2001+6a33db9f
criu
Rocky Linux:8
 before 0:3.18-5.module+el8.10.0+1872+2e18eb19
0:3.18-5.module+el8.10.0+1872+2e18eb19
criu
Rocky Linux:8
 before 0:3.18-5.module+el8.10.0+1874+ce489889
0:3.18-5.module+el8.10.0+1874+ce489889
criu
Rocky Linux:8
 before 0:3.18-5.module+el8.10.0+1880+8e896d1b
0:3.18-5.module+el8.10.0+1880+8e896d1b
criu
Rocky Linux:8
 before 0:3.18-5.module+el8.10.0+1896+b18fa106
0:3.18-5.module+el8.10.0+1896+b18fa106
criu
Rocky Linux:8
 before 0:3.18-5.module+el8.10.0+1815+5fe7415e
0:3.18-5.module+el8.10.0+1815+5fe7415e
go1.23-openssl
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 5 CVEs
 before 1.23.9-150000.1.9.1
1.23.9-150000.1.9.1
go1.23-openssl
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 5 CVEs
 before 1.23.9-150000.1.9.1
1.23.9-150000.1.9.1
go1.23-openssl
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 5 CVEs
 before 1.23.9-150000.1.9.1
1.23.9-150000.1.9.1
go1.23-openssl
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 5 CVEs
 before 1.23.9-150000.1.9.1
1.23.9-150000.1.9.1
go1.23-openssl
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 5 CVEs
 before 1.23.9-150000.1.9.1
1.23.9-150000.1.9.1
go1.23-openssl
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 5 CVEs
 before 1.23.9-150000.1.9.1
1.23.9-150000.1.9.1
go1.23-openssl
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 5 CVEs
 before 1.23.9-150000.1.9.1
1.23.9-150000.1.9.1
go1.23-openssl
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 5 CVEs
 before 1.23.9-150000.1.9.1
1.23.9-150000.1.9.1
go1.23-openssl
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 5 CVEs
 before 1.23.9-150000.1.9.1
1.23.9-150000.1.9.1
go1.23-openssl
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 5 CVEs
 before 1.23.9-150000.1.9.1
1.23.9-150000.1.9.1
go1.23-openssl
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 5 CVEs
 before 1.23.9-150000.1.9.1
1.23.9-150000.1.9.1
go1.23-openssl
SUSE:Enterprise Storage 7.1
From an advisory covering 5 CVEs
 before 1.23.9-150000.1.9.1
1.23.9-150000.1.9.1
go1.23-openssl
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 10 CVEs
 before 1.23.12-150600.13.9.1
1.23.12-150600.13.9.1
go1.23-openssl
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 10 CVEs
 before 1.23.12-150600.13.9.1
1.23.12-150600.13.9.1
go1.23-openssl
openSUSE:Leap 15.6
From an advisory covering 10 CVEs
 before 1.23.12-150600.13.9.1
1.23.12-150600.13.9.1
go1.23
SUSE:Linux Enterprise Module for Development Tools 15 SP6
 before 1.23.8-150000.1.27.1
1.23.8-150000.1.27.1
go1.23
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 1.23.8-150000.1.27.1
1.23.8-150000.1.27.1
go1.23
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 1.23.8-150000.1.27.1
1.23.8-150000.1.27.1
go1.23
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 1.23.8-150000.1.27.1
1.23.8-150000.1.27.1
go1.23
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
 before 1.23.8-150000.1.27.1
1.23.8-150000.1.27.1
go1.23
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
 before 1.23.8-150000.1.27.1
1.23.8-150000.1.27.1
go1.23
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 1.23.8-150000.1.27.1
1.23.8-150000.1.27.1
go1.23
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 1.23.8-150000.1.27.1
1.23.8-150000.1.27.1
go1.23
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 1.23.8-150000.1.27.1
1.23.8-150000.1.27.1
go1.23
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 1.23.8-150000.1.27.1
1.23.8-150000.1.27.1
go1.23
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 1.23.8-150000.1.27.1
1.23.8-150000.1.27.1
go1.23
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 1.23.8-150000.1.27.1
1.23.8-150000.1.27.1
go1.23
SUSE:Enterprise Storage 7.1
 before 1.23.8-150000.1.27.1
1.23.8-150000.1.27.1
go1.23
openSUSE:Leap 15.6
 before 1.23.8-150000.1.27.1
1.23.8-150000.1.27.1
go1.24
SUSE:Linux Enterprise Module for Development Tools 15 SP6
 before 1.24.2-150000.1.17.1
1.24.2-150000.1.17.1
go1.24
openSUSE:Leap 15.6
 before 1.24.2-150000.1.17.1
1.24.2-150000.1.17.1
go1.24
SUSE:Linux Enterprise Server 16.0
 before 1.24.13-160000.3.1
1.24.13-160000.3.1
go1.24-openssl
SUSE:Linux Enterprise Server 16.0
 before 1.24.13-160000.3.1
1.24.13-160000.3.1
go1.25
SUSE:Linux Enterprise Server 16.0
 before 1.25.12-160000.2.1
1.25.12-160000.2.1
go1.25-openssl
SUSE:Linux Enterprise Server 16.0
 before 1.25.12-160000.2.1
1.25.12-160000.2.1
go1.26
SUSE:Linux Enterprise Server 16.0
 before 1.26.5-160000.2.1
1.26.5-160000.2.1
go1.26-openssl
SUSE:Linux Enterprise Server 16.0
 before 1.26.5-160000.2.1
1.26.5-160000.2.1
go1.24
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 1.24.13-160000.3.1
1.24.13-160000.3.1
go1.24-openssl
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 1.24.13-160000.3.1
1.24.13-160000.3.1
go1.25
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 1.25.12-160000.2.1
1.25.12-160000.2.1
go1.25-openssl
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 1.25.12-160000.2.1
1.25.12-160000.2.1
go1.26
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 1.26.5-160000.2.1
1.26.5-160000.2.1
go1.26-openssl
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 1.26.5-160000.2.1
1.26.5-160000.2.1
golang-1.10
Ubuntu:14.04:LTS
 All versions, plus listed versions
1.10.4-2ubuntu1~14.04.1
 None known
golang-1.10
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.10.4-2ubuntu1~16.04.11.10.4-2ubuntu1~16.04.2
 None known
golang-1.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.6-0ubuntu11.6-0ubuntu21.6-0ubuntu31.6-0ubuntu41.6-0ubuntu5
Show 5 moreShow less
1.6.1-0ubuntu11.6.2-0ubuntu5~16.041.6.2-0ubuntu5~16.04.21.6.2-0ubuntu5~16.04.31.6.2-0ubuntu5~16.04.4
 None known
golang-1.13
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.13.8-1ubuntu1~16.04.21.13.8-1ubuntu1~16.04.31.13.8-1ubuntu1~16.04.3+esm21.13.8-1ubuntu1~16.04.3+esm3
 None known
golang-1.18
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.18.1-1ubuntu1~16.04.61.18.1-1ubuntu1~16.04.6+esm1
 None known
golang-1.10
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.10~rc1-11.10~rc1-1ubuntu11.10~rc1-2ubuntu11.10~rc2-1ubuntu11.10-1ubuntu11.10.1-1ubuntu21.10.4-2ubuntu1~18.04.11.10.4-2ubuntu1~18.04.2
 None known
golang-1.13
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.13.8-1ubuntu1~18.04.21.13.8-1ubuntu1~18.04.31.13.8-1ubuntu1~18.04.41.13.8-1ubuntu1~18.04.4+esm1
 None known
golang-1.16
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.16.2-0ubuntu1~18.04.21.16.2-0ubuntu1~18.04.2+esm1
 None known
golang-1.18
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.18.1-1ubuntu1~18.04.31.18.1-1ubuntu1~18.04.41.18.1-1ubuntu1~18.04.4+esm1
 None known
golang-1.8
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.8.3-2ubuntu11.8.3-2ubuntu1.18.04.1
 None known
golang-1.9
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.9.1-2ubuntu11.9.2-1ubuntu11.9.2-3ubuntu11.9.3-1ubuntu11.9.4-1ubuntu1
 None known
golang-1.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.13.1-1ubuntu11.13.3-1ubuntu11.13.4-1ubuntu11.13.5-1ubuntu11.13.6-1ubuntu1
Show 5 moreShow less
1.13.6-2ubuntu11.13.7-1ubuntu11.13.8-1ubuntu11.13.8-1ubuntu1.11.13.8-1ubuntu1.2
 None known
golang-1.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.14~beta1-11.14~beta1-21.14~rc1-11.14-11.14.1-1
Show 4 moreShow less
1.14.2-11.14.2-1ubuntu11.14.3-2ubuntu2~20.04.11.14.3-2ubuntu2~20.04.2
 None known
golang-1.16
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
1.16.2-0ubuntu1~20.041.16.2-0ubuntu1~20.04.11.16.2-0ubuntu1~20.04.1+esm1
 None known
golang-1.18
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.18.1-1ubuntu1~20.04.11.18.1-1ubuntu1~20.04.21.18.1-1ubuntu1~20.04.3
 None known
golang-1.20
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.20.3-1ubuntu0.1~20.041.20.3-1ubuntu0.1~20.04.1
 None known
golang-1.21
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.21.1-1~ubuntu20.04.11.21.1-1~ubuntu20.04.21.21.1-1~ubuntu20.04.3
 None known
golang-1.22
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.22.2-2~20.04.11.22.2-2~20.04.21.22.2-2~20.04.3
 None known
golang-1.17
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.17-1ubuntu21.17.3-1ubuntu11.17.3-1ubuntu21.17.13-3ubuntu11.17.13-3ubuntu1.21.17.13-3ubuntu1.3
 None known
golang-1.18
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.18~beta1-0ubuntu11.18~beta2-1ubuntu11.18~beta2-1ubuntu21.18~rc1-1ubuntu11.18-1ubuntu1
Show 4 moreShow less
1.18.1-1ubuntu11.18.1-1ubuntu1.11.18.1-1ubuntu1.21.18.1-1ubuntu1.3
 None known
golang-1.20
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.20.3-1ubuntu0.1~22.041.20.3-1ubuntu0.1~22.04.1
 None known
golang-1.21
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.21.1-1~ubuntu22.04.11.21.1-1~ubuntu22.04.21.21.1-1~ubuntu22.04.31.21.1-1~ubuntu22.04.4
 None known
golang-1.22
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.22.2-2~22.041.22.2-2~22.04.11.22.2-2~22.04.21.22.2-2~22.04.31.22.2-2~22.04.4
 None known
golang-1.23
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.23.1-1~22.041.23.1-1~22.04.21.23.1-1~22.04.3
 None known
golang-1.25
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.25.14-1~ubuntu0.22.04.1
 None known
golang-1.13
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
1.13.8-1ubuntu21.13.8-1ubuntu2.22.04.11.13.8-1ubuntu2.22.04.1+esm11.13.8-1ubuntu2.22.04.2
 None known
golang-1.21
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.21.1-11.21.3-11.21.4-11.21.5-11.21.6-1
Show 6 moreShow less
1.21.7-11.21.7-21.21.8-11.21.8-1build11.21.9-11.21.9-1ubuntu0.1
 None known
golang-1.22
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.22~rc1-21.22.0-11.22.0-21.22.1-11.22.1-1build1
Show 6 moreShow less
1.22.2-21.22.2-2ubuntu0.11.22.2-2ubuntu0.21.22.2-2ubuntu0.31.22.2-2ubuntu0.41.22.2-2ubuntu0.5
 None known
golang-1.23
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.23.1-1~24.041.23.1-1~24.04.1
 None known
golang-1.25
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.25.14-1~ubuntu0.24.04.1
 None known
go1.23
openSUSE:Tumbleweed
 before 1.23.8-1.1
1.23.8-1.1
go1.24
openSUSE:Tumbleweed
 before 1.24.2-1.1
1.24.2-1.1
govulncheck-vulndb
openSUSE:Tumbleweed
 before 0.0.20250408T210408-1.1
0.0.20250408T210408-1.1
kyverno
openSUSE:Tumbleweed
 before 1.14.0-1.1
1.14.0-1.1
traefik2
openSUSE:Tumbleweed
From an advisory covering 9 CVEs
 before 2.11.26-1.1
2.11.26-1.1
kubelogin
openSUSE:Tumbleweed
 before 0.2.10-1.1
0.2.10-1.1
go1.21
openSUSE:Leap 16.0
 before 1.21.13-160000.3.1
1.21.13-160000.3.1
go1.22
openSUSE:Leap 16.0
 before 1.22.12-160000.4.1
1.22.12-160000.4.1
go1.22-openssl
openSUSE:Leap 16.0
 before 1.22.12-160000.4.1
1.22.12-160000.4.1
go1.23
openSUSE:Leap 16.0
 before 1.23.12-160000.3.1
1.23.12-160000.3.1
go1.23-openssl
openSUSE:Leap 16.0
 before 1.23.12-160000.3.1
1.23.12-160000.3.1
go1.24
openSUSE:Leap 16.0
 before 1.24.13-160000.3.1
1.24.13-160000.3.1
go1.24-openssl
openSUSE:Leap 16.0
 before 1.24.13-160000.3.1
1.24.13-160000.3.1
go1.25
openSUSE:Leap 16.0
 before 1.25.12-160000.2.1
1.25.12-160000.2.1
go1.25-openssl
openSUSE:Leap 16.0
 before 1.25.12-160000.2.1
1.25.12-160000.2.1
go1.26
openSUSE:Leap 16.0
 before 1.26.5-160000.2.1
1.26.5-160000.2.1
go1.26-openssl
openSUSE:Leap 16.0
 before 1.26.5-160000.2.1
1.26.5-160000.2.1

History

History
RecordedChangedSources
affected
factsOSV
affected, aliases, aliases_more, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-22871 is a critical vulnerability (CVSS 9.1) in Go Standard Library Net/http/internal, published April 3, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.84%, the 58th percentile. Fixed in spiral/roadrunner 2025.1.0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,209 package rows, 204 versions and 174 references. The JSON record has them. Also not on the record: 88 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 138 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open