Every CVE Search/ Get API key

CVE-2022-2583

Race condition in github.com/ntbosscher/gobase

3.7 LowFix available

A race condition can cause incorrect HTTP request routing.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
None

Exploit likelihood

0.38%Down 0.5 points since Dec 28, 2022
90%50%10%1%

What each source reports

NVD Score used 3.7

A race condition can cause incorrect HTTP request routing.

Record
CVE-2022-2583
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-362
Updated
2026-11-02
CVE List 3.7

Race condition in github.com/ntbosscher/gobase

A race condition can cause incorrect HTTP request routing.

Record
CVE-2022-2583
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
EUVDEUVD-2022-7495 3.7

A race condition can cause incorrect HTTP request routing.

Record
EUVD-2022-7495
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-4348-x292-h437 3.7

Duplicate Advisory: GoBase Race Condition vulnerability

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-h2x7-2ff6-v32p. This link is maintained to preserve external references.

Original Description

A race condition can cause incorrect HTTP request routing.

Record
GHSA-4348-x292-h437
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-362
Updated
2026-11-02
GitHub AdvisoriesGHSA-h2x7-2ff6-v32p 3.7

gobase subject to Incorrect routing of some HTTP requests when using httpauth due to a race condition

Impact

Incorrect routing of some HTTP requests when using httpauth due to a race condition

Patches

Upgrade to version 0.7.2 for fix

Workarounds

None

For more information

If you have any questions or comments about this advisory:

Record
GHSA-h2x7-2ff6-v32p
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-362
Updated
2026-11-02
OSV 3.7

Race condition in github.com/ntbosscher/gobase

A race condition can cause incorrect HTTP request routing.

Record
CVE-2022-2583
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVGHSA-4348-x292-h437 3.7

Duplicate Advisory: GoBase Race Condition vulnerability

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-h2x7-2ff6-v32p. This link is maintained to preserve external references.

Original Description

A race condition can cause incorrect HTTP request routing.

Record
GHSA-4348-x292-h437
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-362
Updated
2026-11-02
OSVGHSA-h2x7-2ff6-v32p 3.7

gobase subject to Incorrect routing of some HTTP requests when using httpauth due to a race condition

Impact

Incorrect routing of some HTTP requests when using httpauth due to a race condition

Patches

Upgrade to version 0.7.2 for fix

Workarounds

None

For more information

If you have any questions or comments about this advisory:

Record
GHSA-h2x7-2ff6-v32p
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness
CWE-362
Updated
2026-11-02
OSVGO-2022-0400 No score

Race condition in github.com/ntbosscher/gobase

A race condition can cause incorrect HTTP request routing.

Record
GO-2022-0400
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
github.com/ntbosscher/gobase
Go
 before 0.7.2
0.7.2

History

History
RecordedChangedSources
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-2583 is a low vulnerability (CVSS 3.7) in Gobase Project Gobase, published February 11, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 31st percentile. Fixed in github.com/ntbosscher/gobase 0.7.2.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open