CVE-2021-44716

golang.org/x/net/http2 allows uncontrolled memory consumption

7.5 HighFix available

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

4.25%Up 3.8 points since Jan 1, 2022

What each source reports

NVD Score used 7.5

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: CVE-2021-44716
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-400
Updated: 2026-11-02

CVE List No score

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: CVE-2021-44716
Updated: 2026-11-02

EUVDEUVD-2022-0700 No score

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: EUVD-2022-0700
Updated: 2026-11-03

GitHub AdvisoriesGHSA-vc3p-29h2-gpcp 7.5

golang.org/x/net/http2 allows uncontrolled memory consumption

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: GHSA-vc3p-29h2-gpcp
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-400
Updated: 2026-11-02

OSVALPINE-CVE-2021-44716 7.5

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: ALPINE-CVE-2021-44716
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-03

OSVAZL-31978 7.5

CVE-2021-44716 affecting package kured for versions less than 1.13.2-1

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-31978
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 48 moreShow less

OSVAZL-33564 7.5

CVE-2021-44716 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-19

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-33564
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-33571 7.5

CVE-2021-44716 affecting package cf-cli for versions less than 8.4.0-16

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-33571
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-33577 7.5

CVE-2021-44716 affecting package csi-driver-lvm for versions less than 0.4.1-15

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-33577
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-33581 7.5

CVE-2021-44716 affecting package flannel for versions less than 0.14.0-21

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-33581
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-33585 7.5

CVE-2021-44716 affecting package git-lfs for versions less than 3.1.4-17

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-33585
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-33592 7.5

CVE-2021-44716 affecting package jx for versions less than 3.2.236-16

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-33592
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-33597 7.5

CVE-2021-44716 affecting package keda for versions less than 2.4.0-19

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-33597
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-33604 7.5

CVE-2021-44716 affecting package kube-vip-cloud-provider for versions less than 0.0.2-16

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-33604
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-33607 7.5

CVE-2021-44716 affecting package libcontainers-common for versions less than 20210626-3

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-33607
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-33612 7.5

CVE-2021-44716 affecting package local-path-provisioner for versions less than 0.0.21-16

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-33612
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-33613 7.5

CVE-2021-44716 affecting package moby-buildx for versions less than 0.7.1-18

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-33613
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-33616 7.5

CVE-2021-44716 affecting package moby-cli for versions less than 20.10.27-5

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-33616
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-33624 7.5

CVE-2021-44716 affecting package nmi for versions less than 1.8.11-2

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-33624
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-33627 7.5

CVE-2021-44716 affecting package node-problem-detector for versions less than 0.8.10-20

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-33627
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-33635 7.5

CVE-2021-44716 affecting package prometheus-node-exporter for versions less than 1.3.1-24

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-33635
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-33638 7.5

CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.7.10-19

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-33638
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-33641 7.5

CVE-2021-44716 affecting package rook for versions less than 1.6.2-19

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-33641
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-34836 7.5

CVE-2021-44716 affecting package keda for versions less than 2.14.0-1

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-34836
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-35004 7.5

CVE-2021-44716 affecting package moby-engine for versions less than 25.0.3-1

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-35004
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-35013 7.5

CVE-2021-44716 affecting package multus for versions less than 4.0.2-1

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-35013
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-35037 7.5

CVE-2021-44716 affecting package node-problem-detector for versions less than 0.8.15-1

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-35037
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-35123 7.5

CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.8.2-1

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-35123
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-39672 7.5

CVE-2021-44716 affecting package cri-o for versions less than 1.21.7-2

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-39672
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-43909 7.5

CVE-2021-44716 affecting package buildah 1.18.0-29

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-43909
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-45165 7.5

CVE-2021-44716 affecting package buildah for versions less than 1.41.4-2

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-45165
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVAZL-7125 7.5

CVE-2021-44716 affecting package golang for versions less than 1.17.8-1

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: AZL-7125
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVBELL-CVE-2021-44716 7.5

CVE-2021-44716 does not affect BellSoft software

Record: BELL-CVE-2021-44716
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSV 7.5

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: CVE-2021-44716
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2021-44716 7.5

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: DEBIAN-CVE-2021-44716
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVGHSA-vc3p-29h2-gpcp 7.5

golang.org/x/net/http2 allows uncontrolled memory consumption

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: GHSA-vc3p-29h2-gpcp
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-400
Updated: 2026-11-02

OSVOESA-2022-1499 7.5

golang security update

The Go Programming Language.

Security Fix(es):

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.(CVE-2021-44716)

Record: OESA-2022-1499
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2021:5160 7.5

Red Hat Security Advisory: go-toolset:rhel8 security and bug fix update

Record: RHSA-2021:5160
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2021:5176 7.5

Red Hat Security Advisory: go-toolset-1.16 and go-toolset-1.16-golang security and bug fix update

Record: RHSA-2021:5176
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2022:0001 7.5

Red Hat Security Advisory: grafana security update

Record: RHSA-2022:0001
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2022:0002 7.5

Red Hat Security Advisory: grafana security update

Record: RHSA-2022:0002
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2022:0055 9.0

Red Hat Security Advisory: OpenShift Container Platform 4.10.3 bug fix and security update

Record: RHSA-2022:0055
CVSS 3.1: 9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2022:0237 7.5

Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (etcd) security update

Record: RHSA-2022:0237
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2022:0260 7.5

Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (etcd) security update

Record: RHSA-2022:0260
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2022:0557 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.9.22 security update

Record: RHSA-2022:0557
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2022:0927 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.10.5 packages and security update

Record: RHSA-2022:0927
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2022:1056 7.5

Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.21.0

Record: RHSA-2022:1056
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2022:1361 7.5

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.10.0 RPM security,enhancement&bugfix update

Record: RHSA-2022:1361
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2022:1628 7.5

Red Hat Security Advisory: web-admin-build security update

Record: RHSA-2022:1628
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2023:0407 7.5

Red Hat Security Advisory: OpenShift Virtualization 4.12.0 RPMs security update

Record: RHSA-2023:0407
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRLSA-2021:5160 7.5

Important: go-toolset:rhel8 security and bug fix update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

Security Fix(es):

golang: net/http: limit growth of header canonicalization cache (CVE-2021-44716)
golang: syscall: don't close fd 0 on ForkExec error (CVE-2021-44717)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

Rebase Go to 1.16.12 (BZ#2031125)

Record: RLSA-2021:5160
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRLSA-2022:0001 7.5

Important: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.

Security Fix(es):

golang: net/http: limit growth of header canonicalization cache (CVE-2021-44716)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2022:0001
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2021-44716 7.5

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

Record: UBUNTU-CVE-2021-44716
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVALSA-2021:5160 No score

Important: go-toolset:rhel8 security and bug fix update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

Security Fix(es):

golang: net/http: limit growth of header canonicalization cache (CVE-2021-44716)
golang: syscall: don't close fd 0 on ForkExec error (CVE-2021-44717)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

Rebase Go to 1.16.12 (BZ#2031125)

Record: ALSA-2021:5160
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`golang.org/x/net/http2` Go	before 0.0.0-20211209124913-491a49abca63	0.0.0-20211209124913-491a49abca63
`go` Alpine:v3.14	1.17.0 up to 1.16.15-r0	1.16.15-r0
`go` Alpine:v3.15	1.17.0 up to 1.17.9-r0	1.17.9-r0
`go` Alpine:v3.16	1.17.0 up to 1.17.6-r0	1.17.6-r0
`go` Alpine:v3.17	1.17.0 up to 1.17.6-r0	1.17.6-r0
`go` Alpine:v3.18	1.17.0 up to 1.17.6-r0	1.17.6-r0
`go` Alpine:v3.19	1.17.0 up to 1.17.6-r0	1.17.6-r0
`go` Alpine:v3.20	1.17.0 up to 1.17.6-r0	1.17.6-r0
`go` Alpine:v3.21	1.17.0 up to 1.17.6-r0	1.17.6-r0
`go` Alpine:v3.22	1.17.0 up to 1.17.6-r0	1.17.6-r0

Show 268 moreShow less

Affected packages
Package	Affected	Fixed
`go` Alpine:v3.23	1.17.0 up to 1.17.6-r0	1.17.6-r0
`go` Alpine:v3.24	1.17.0 up to 1.17.6-r0	1.17.6-r0
`nomad` Alpine:v3.15	before 1.1.12-r0	1.1.12-r0
`nomad` Alpine:v3.16	before 1.2.6-r0	1.2.6-r0
`nomad` Alpine:v3.17	before 1.2.6-r0	1.2.6-r0
`nomad` Alpine:v3.18	before 1.2.6-r0	1.2.6-r0
`delve` AlmaLinux:8	before 1.6.0-1.module_el8.5.0+2604+960c7771	1.6.0-1.module_el8.5.0+2604+960c7771
`go-toolset` AlmaLinux:8	before 1.16.12-1.module_el8.5.0+2604+960c7771	1.16.12-1.module_el8.5.0+2604+960c7771
`golang` AlmaLinux:8	before 1.16.12-1.module_el8.5.0+2604+960c7771	1.16.12-1.module_el8.5.0+2604+960c7771
`golang-bin` AlmaLinux:8	before 1.16.12-1.module_el8.5.0+2604+960c7771	1.16.12-1.module_el8.5.0+2604+960c7771
`golang-docs` AlmaLinux:8	before 1.16.12-1.module_el8.5.0+2604+960c7771	1.16.12-1.module_el8.5.0+2604+960c7771
`golang-misc` AlmaLinux:8	before 1.16.12-1.module_el8.5.0+2604+960c7771	1.16.12-1.module_el8.5.0+2604+960c7771
`golang-race` AlmaLinux:8	before 1.16.12-1.module_el8.5.0+2604+960c7771	1.16.12-1.module_el8.5.0+2604+960c7771
`golang-src` AlmaLinux:8	before 1.16.12-1.module_el8.5.0+2604+960c7771	1.16.12-1.module_el8.5.0+2604+960c7771
`golang-tests` AlmaLinux:8	before 1.16.12-1.module_el8.5.0+2604+960c7771	1.16.12-1.module_el8.5.0+2604+960c7771
`grafana` AlmaLinux:8	before 7.5.9-5.el8_5	7.5.9-5.el8_5
`kured` Azure Linux:2	before 1.13.2-1	1.13.2-1
`application-gateway-kubernetes-ingress` Azure Linux:2	before 1.4.0-19	1.4.0-19
`cf-cli` Azure Linux:2	before 8.4.0-16	8.4.0-16
`csi-driver-lvm` Azure Linux:2	before 0.4.1-15	0.4.1-15
`flannel` Azure Linux:2	before 0.14.0-21	0.14.0-21
`git-lfs` Azure Linux:2	before 3.1.4-17	3.1.4-17
`jx` Azure Linux:2	before 3.2.236-16	3.2.236-16
`keda` Azure Linux:2	before 2.4.0-19	2.4.0-19
`kube-vip-cloud-provider` Azure Linux:2	before 0.0.2-16	0.0.2-16
`libcontainers-common` Azure Linux:2	before 20210626-3	20210626-3
`local-path-provisioner` Azure Linux:2	before 0.0.21-16	0.0.21-16
`moby-buildx` Azure Linux:2	before 0.7.1-18	0.7.1-18
`moby-cli` Azure Linux:2	before 20.10.27-5	20.10.27-5
`nmi` Azure Linux:2	before 1.8.11-2	1.8.11-2
`node-problem-detector` Azure Linux:2	before 0.8.10-20	0.8.10-20
`prometheus-node-exporter` Azure Linux:2	before 1.3.1-24	1.3.1-24
`prometheus-process-exporter` Azure Linux:2	before 0.7.10-19	0.7.10-19
`rook` Azure Linux:2	before 1.6.2-19	1.6.2-19
`keda` Azure Linux:3	before 2.14.0-1	2.14.0-1
`moby-engine` Azure Linux:3	before 25.0.3-1	25.0.3-1
`multus` Azure Linux:3	before 4.0.2-1	4.0.2-1
`node-problem-detector` Azure Linux:3	before 0.8.15-1	0.8.15-1
`prometheus-process-exporter` Azure Linux:3	before 0.8.2-1	0.8.2-1
`cri-o` Azure Linux:2	before 1.21.7-2	1.21.7-2
`buildah` Azure Linux:2	through 1.18.0-29	None known
`buildah` Azure Linux:3	before 1.41.4-2	1.41.4-2
`golang` Azure Linux:2	before 1.17.8-1	1.17.8-1
`golang` Bitnami	before 1.16.12, 1.17.0 up to 1.17.5	1.16.121.17.5
`golang-golang-x-net` Debian:12	before 1:0.0+git20211209.491a49a+dfsg-1	1:0.0+git20211209.491a49a+dfsg-1
`golang-golang-x-net` Debian:13	before 1:0.0+git20211209.491a49a+dfsg-1	1:0.0+git20211209.491a49a+dfsg-1
`golang-golang-x-net` Debian:14	before 1:0.0+git20211209.491a49a+dfsg-1	1:0.0+git20211209.491a49a+dfsg-1
`golang-1.8` Debian:9	before 1.8.1-1+deb9u4, plus listed versions 1.8.1-11.8.1-1+deb9u11.8.1-1+deb9u21.8.1-1+deb9u3	1.8.1-1+deb9u4
`golang-1.7` Debian:9	before 1.7.4-2+deb9u4, plus listed versions 1.7.4-21.7.4-2+deb9u11.7.4-2+deb9u21.7.4-2+deb9u3	1.7.4-2+deb9u4
`golang-1.11` Debian:10	before 1.11.6-1+deb10u6, plus listed versions 1.11.6-11.11.6-1+deb10u11.11.6-1+deb10u21.11.6-1+deb10u31.11.6-1+deb10u41.11.6-1+deb10u5	1.11.6-1+deb10u6
`stdlib` Go	before 1.16.12, 1.17.0-0 up to 1.17.5	1.16.121.17.5
`golang.org/x/net` Go	before 0.0.0-20211209124913-491a49abca63	0.0.0-20211209124913-491a49abca63
`golang` Mageia:8	before 1.17.5-1.mga8	1.17.5-1.mga8
`golang` openEuler:20.03-LTS-SP1	before 1.15.7-7.oe1	1.15.7-7.oe1
`golang` openEuler:20.03-LTS-SP2	before 1.15.7-7.oe1	1.15.7-7.oe1
`golang` openEuler:20.03-LTS-SP3	before 1.15.7-6.oe1	1.15.7-6.oe1
`delve` Red Hat:enterprise_linux:8::appstream	before 0:1.6.0-1.module+el8.5.0+10379+d6b83bd0	0:1.6.0-1.module+el8.5.0+10379+d6b83bd0
`delve-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:1.6.0-1.module+el8.5.0+10379+d6b83bd0	0:1.6.0-1.module+el8.5.0+10379+d6b83bd0
`delve-debugsource` Red Hat:enterprise_linux:8::appstream	before 0:1.6.0-1.module+el8.5.0+10379+d6b83bd0	0:1.6.0-1.module+el8.5.0+10379+d6b83bd0
`go-toolset` Red Hat:enterprise_linux:8::appstream	before 0:1.16.12-1.module+el8.5.0+13637+960c7771	0:1.16.12-1.module+el8.5.0+13637+960c7771
`golang` Red Hat:enterprise_linux:8::appstream	before 0:1.16.12-1.module+el8.5.0+13637+960c7771	0:1.16.12-1.module+el8.5.0+13637+960c7771
`golang-bin` Red Hat:enterprise_linux:8::appstream	before 0:1.16.12-1.module+el8.5.0+13637+960c7771	0:1.16.12-1.module+el8.5.0+13637+960c7771
`golang-docs` Red Hat:enterprise_linux:8::appstream	before 0:1.16.12-1.module+el8.5.0+13637+960c7771	0:1.16.12-1.module+el8.5.0+13637+960c7771
`golang-misc` Red Hat:enterprise_linux:8::appstream	before 0:1.16.12-1.module+el8.5.0+13637+960c7771	0:1.16.12-1.module+el8.5.0+13637+960c7771
`golang-race` Red Hat:enterprise_linux:8::appstream	before 0:1.16.12-1.module+el8.5.0+13637+960c7771	0:1.16.12-1.module+el8.5.0+13637+960c7771
`golang-src` Red Hat:enterprise_linux:8::appstream	before 0:1.16.12-1.module+el8.5.0+13637+960c7771	0:1.16.12-1.module+el8.5.0+13637+960c7771
`golang-tests` Red Hat:enterprise_linux:8::appstream	before 0:1.16.12-1.module+el8.5.0+13637+960c7771	0:1.16.12-1.module+el8.5.0+13637+960c7771
`go-toolset-1.16` Red Hat:devtools:2021	before 0:1.16.12-1.el7_9	0:1.16.12-1.el7_9
`go-toolset-1.16-build` Red Hat:devtools:2021	before 0:1.16.12-1.el7_9	0:1.16.12-1.el7_9
`go-toolset-1.16-golang` Red Hat:devtools:2021	before 0:1.16.12-1.el7_9	0:1.16.12-1.el7_9
`go-toolset-1.16-golang-bin` Red Hat:devtools:2021	before 0:1.16.12-1.el7_9	0:1.16.12-1.el7_9
`go-toolset-1.16-golang-docs` Red Hat:devtools:2021	before 0:1.16.12-1.el7_9	0:1.16.12-1.el7_9
`go-toolset-1.16-golang-misc` Red Hat:devtools:2021	before 0:1.16.12-1.el7_9	0:1.16.12-1.el7_9
`go-toolset-1.16-golang-race` Red Hat:devtools:2021	before 0:1.16.12-1.el7_9	0:1.16.12-1.el7_9
`go-toolset-1.16-golang-src` Red Hat:devtools:2021	before 0:1.16.12-1.el7_9	0:1.16.12-1.el7_9
`go-toolset-1.16-golang-tests` Red Hat:devtools:2021	before 0:1.16.12-1.el7_9	0:1.16.12-1.el7_9
`go-toolset-1.16-runtime` Red Hat:devtools:2021	before 0:1.16.12-1.el7_9	0:1.16.12-1.el7_9
`go-toolset-1.16-scldevel` Red Hat:devtools:2021	before 0:1.16.12-1.el7_9	0:1.16.12-1.el7_9
`grafana` Red Hat:enterprise_linux:8::appstream	before 0:7.5.9-5.el8_5	0:7.5.9-5.el8_5
`grafana-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:7.5.9-5.el8_5	0:7.5.9-5.el8_5
`grafana` Red Hat:rhel_eus:8.4::appstream	before 0:7.3.6-4.el8_4	0:7.3.6-4.el8_4
`grafana-debuginfo` Red Hat:rhel_eus:8.4::appstream	before 0:7.3.6-4.el8_4	0:7.3.6-4.el8_4
`jenkins` Red Hat:openshift:4.10::el8	before 0:2.319.2.1643288987-1.el8	0:2.319.2.1643288987-1.el8
`coreos-installer` Red Hat:openshift:4.10::el8	before 0:0.12.0-1.rhaos4.10.el8	0:0.12.0-1.rhaos4.10.el8
`coreos-installer-bootinfra` Red Hat:openshift:4.10::el8	before 0:0.12.0-1.rhaos4.10.el8	0:0.12.0-1.rhaos4.10.el8
`coreos-installer-bootinfra-debuginfo` Red Hat:openshift:4.10::el8	before 0:0.12.0-1.rhaos4.10.el8	0:0.12.0-1.rhaos4.10.el8
`coreos-installer-debuginfo` Red Hat:openshift:4.10::el8	before 0:0.12.0-1.rhaos4.10.el8	0:0.12.0-1.rhaos4.10.el8
`coreos-installer-debugsource` Red Hat:openshift:4.10::el8	before 0:0.12.0-1.rhaos4.10.el8	0:0.12.0-1.rhaos4.10.el8
`jenkins-2-plugins` Red Hat:openshift:4.10::el8	before 0:4.10.1643404185-1.el8	0:4.10.1643404185-1.el8
`cri-o` Red Hat:openshift:4.10::el7	before 0:1.23.0-92.rhaos4.10.gitdaab4d1.el7	0:1.23.0-92.rhaos4.10.gitdaab4d1.el7
`cri-o-debuginfo` Red Hat:openshift:4.10::el7	before 0:1.23.0-92.rhaos4.10.gitdaab4d1.el7	0:1.23.0-92.rhaos4.10.gitdaab4d1.el7
`cri-o` Red Hat:openshift:4.10::el8	before 0:1.23.1-9.rhaos4.10.gitbdffb9a.el8	0:1.23.1-9.rhaos4.10.gitbdffb9a.el8
`cri-o-debuginfo` Red Hat:openshift:4.10::el8	before 0:1.23.1-9.rhaos4.10.gitbdffb9a.el8	0:1.23.1-9.rhaos4.10.gitbdffb9a.el8
`cri-o-debugsource` Red Hat:openshift:4.10::el8	before 0:1.23.1-9.rhaos4.10.gitbdffb9a.el8	0:1.23.1-9.rhaos4.10.gitbdffb9a.el8
`openshift` Red Hat:openshift:4.10::el7	before 0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7	0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7
`openshift-clients` Red Hat:openshift:4.10::el7	before 0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7	0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7
`openshift-clients-redistributable` Red Hat:openshift:4.10::el7	before 0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7	0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7
`openshift-hyperkube` Red Hat:openshift:4.10::el7	before 0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7	0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7
`openshift` Red Hat:openshift:4.10::el8	before 0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8	0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8
`openshift-clients` Red Hat:openshift:4.10::el8	before 0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8	0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8
`openshift-clients-redistributable` Red Hat:openshift:4.10::el8	before 0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8	0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8
`openshift-hyperkube` Red Hat:openshift:4.10::el8	before 0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8	0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8
`etcd` Red Hat:openstack:16.2::el8	before 0:3.3.23-7.el8ost	0:3.3.23-7.el8ost
`etcd-debuginfo` Red Hat:openstack:16.2::el8	before 0:3.3.23-7.el8ost	0:3.3.23-7.el8ost
`etcd-debugsource` Red Hat:openstack:16.2::el8	before 0:3.3.23-7.el8ost	0:3.3.23-7.el8ost
`etcd` Red Hat:openstack:16.1::el8	before 0:3.3.23-7.el8ost	0:3.3.23-7.el8ost
`etcd-debuginfo` Red Hat:openstack:16.1::el8	before 0:3.3.23-7.el8ost	0:3.3.23-7.el8ost
`etcd-debugsource` Red Hat:openstack:16.1::el8	before 0:3.3.23-7.el8ost	0:3.3.23-7.el8ost
`cri-o` Red Hat:openshift:4.9::el7	before 0:1.22.1-17.rhaos4.9.git3029b1d.el7	0:1.22.1-17.rhaos4.9.git3029b1d.el7
`cri-o-debuginfo` Red Hat:openshift:4.9::el7	before 0:1.22.1-17.rhaos4.9.git3029b1d.el7	0:1.22.1-17.rhaos4.9.git3029b1d.el7
`butane` Red Hat:openshift:4.9::el8	before 0:0.13.1-2.rhaos4.9.el8	0:0.13.1-2.rhaos4.9.el8
`butane-debuginfo` Red Hat:openshift:4.9::el8	before 0:0.13.1-2.rhaos4.9.el8	0:0.13.1-2.rhaos4.9.el8
`butane-debugsource` Red Hat:openshift:4.9::el8	before 0:0.13.1-2.rhaos4.9.el8	0:0.13.1-2.rhaos4.9.el8
`butane-redistributable` Red Hat:openshift:4.9::el8	before 0:0.13.1-2.rhaos4.9.el8	0:0.13.1-2.rhaos4.9.el8
`cri-o` Red Hat:openshift:4.9::el8	before 0:1.22.1-17.rhaos4.9.git3029b1d.2.el8	0:1.22.1-17.rhaos4.9.git3029b1d.2.el8
`cri-o-debuginfo` Red Hat:openshift:4.9::el8	before 0:1.22.1-17.rhaos4.9.git3029b1d.2.el8	0:1.22.1-17.rhaos4.9.git3029b1d.2.el8
`cri-o-debugsource` Red Hat:openshift:4.9::el8	before 0:1.22.1-17.rhaos4.9.git3029b1d.2.el8	0:1.22.1-17.rhaos4.9.git3029b1d.2.el8
`cri-tools` Red Hat:openshift:4.9::el8	before 0:1.22.0-2.el8	0:1.22.0-2.el8
`cri-tools-debuginfo` Red Hat:openshift:4.9::el8	before 0:1.22.0-2.el8	0:1.22.0-2.el8
`cri-tools-debugsource` Red Hat:openshift:4.9::el8	before 0:1.22.0-2.el8	0:1.22.0-2.el8
`golang-github-prometheus-promu` Red Hat:openshift:4.9::el8	before 0:0.5.0-5.git642a960.el8	0:0.5.0-5.git642a960.el8
`ignition` Red Hat:openshift:4.9::el8	before 0:2.12.0-3.rhaos4.9.el8	0:2.12.0-3.rhaos4.9.el8
`ignition-debuginfo` Red Hat:openshift:4.9::el8	before 0:2.12.0-3.rhaos4.9.el8	0:2.12.0-3.rhaos4.9.el8
`ignition-debugsource` Red Hat:openshift:4.9::el8	before 0:2.12.0-3.rhaos4.9.el8	0:2.12.0-3.rhaos4.9.el8
`ignition-validate` Red Hat:openshift:4.9::el8	before 0:2.12.0-3.rhaos4.9.el8	0:2.12.0-3.rhaos4.9.el8
`ignition-validate-debuginfo` Red Hat:openshift:4.9::el8	before 0:2.12.0-3.rhaos4.9.el8	0:2.12.0-3.rhaos4.9.el8
`prometheus-promu` Red Hat:openshift:4.9::el8	before 0:0.5.0-5.git642a960.el8	0:0.5.0-5.git642a960.el8
`openshift` Red Hat:openshift:4.9::el7	before 0:4.9.0-202202111950.p0.gb93fd35.assembly.stream.el7	0:4.9.0-202202111950.p0.gb93fd35.assembly.stream.el7
`openshift-clients` Red Hat:openshift:4.9::el7	before 0:4.9.0-202202140924.p0.g340e212.assembly.stream.el7	0:4.9.0-202202140924.p0.g340e212.assembly.stream.el7
`openshift-clients-redistributable` Red Hat:openshift:4.9::el7	before 0:4.9.0-202202140924.p0.g340e212.assembly.stream.el7	0:4.9.0-202202140924.p0.g340e212.assembly.stream.el7
`openshift-hyperkube` Red Hat:openshift:4.9::el7	before 0:4.9.0-202202111950.p0.gb93fd35.assembly.stream.el7	0:4.9.0-202202111950.p0.gb93fd35.assembly.stream.el7
`openshift` Red Hat:openshift:4.9::el8	before 0:4.9.0-202202111950.p0.gb93fd35.assembly.stream.el8	0:4.9.0-202202111950.p0.gb93fd35.assembly.stream.el8
`openshift-clients` Red Hat:openshift:4.9::el8	before 0:4.9.0-202202140924.p0.g340e212.assembly.stream.el8	0:4.9.0-202202140924.p0.g340e212.assembly.stream.el8
`openshift-clients-redistributable` Red Hat:openshift:4.9::el8	before 0:4.9.0-202202140924.p0.g340e212.assembly.stream.el8	0:4.9.0-202202140924.p0.g340e212.assembly.stream.el8
`openshift-hyperkube` Red Hat:openshift:4.9::el8	before 0:4.9.0-202202111950.p0.gb93fd35.assembly.stream.el8	0:4.9.0-202202111950.p0.gb93fd35.assembly.stream.el8
`containernetworking-plugins` Red Hat:openshift:4.10::el8	before 0:0.9.1-2.rhaos4.10.el8	0:0.9.1-2.rhaos4.10.el8
`containernetworking-plugins-debuginfo` Red Hat:openshift:4.10::el8	before 0:0.9.1-2.rhaos4.10.el8	0:0.9.1-2.rhaos4.10.el8
`containernetworking-plugins-debugsource` Red Hat:openshift:4.10::el8	before 0:0.9.1-2.rhaos4.10.el8	0:0.9.1-2.rhaos4.10.el8
`runc` Red Hat:openshift:4.10::el8	before 3:1.1.0-2.rhaos4.10.el8	3:1.1.0-2.rhaos4.10.el8
`runc-debuginfo` Red Hat:openshift:4.10::el8	before 3:1.1.0-2.rhaos4.10.el8	3:1.1.0-2.rhaos4.10.el8
`runc-debugsource` Red Hat:openshift:4.10::el8	before 3:1.1.0-2.rhaos4.10.el8	3:1.1.0-2.rhaos4.10.el8
`openshift-serverless-clients` Red Hat:serverless:1.0::el8	before 0:1.0.0-2.el8	0:1.0.0-2.el8
`mcg` Red Hat:openshift_data_foundation:4.10::el8	before 0:5.10.0-72.el8	0:5.10.0-72.el8
`mcg-redistributable` Red Hat:openshift_data_foundation:4.10::el8	before 0:5.10.0-72.el8	0:5.10.0-72.el8
`etcd` Red Hat:storage:3.5:wa:el7	before 0:3.3.23-9.el7rhgs	0:3.3.23-9.el7rhgs
`etcd-debuginfo` Red Hat:storage:3.5:wa:el7	before 0:3.3.23-9.el7rhgs	0:3.3.23-9.el7rhgs
`grafana` Red Hat:storage:3.5:wa:el7	before 0:5.2.4-5.el7rhgs	0:5.2.4-5.el7rhgs
`kubevirt` Red Hat:container_native_virtualization:4.12::el7	before 0:4.12.0-1057.el7	0:4.12.0-1057.el7
`kubevirt-virtctl` Red Hat:container_native_virtualization:4.12::el7	before 0:4.12.0-1057.el7	0:4.12.0-1057.el7
`kubevirt-virtctl-redistributable` Red Hat:container_native_virtualization:4.12::el7	before 0:4.12.0-1057.el7	0:4.12.0-1057.el7
`kubevirt` Red Hat:container_native_virtualization:4.12::el8	before 0:4.12.0-1057.el8	0:4.12.0-1057.el8
`kubevirt-virtctl` Red Hat:container_native_virtualization:4.12::el8	before 0:4.12.0-1057.el8	0:4.12.0-1057.el8
`kubevirt-virtctl-redistributable` Red Hat:container_native_virtualization:4.12::el8	before 0:4.12.0-1057.el8	0:4.12.0-1057.el8
`delve` Rocky Linux:8	before 0:1.6.0-1.module+el8.5.0+694+f77f0bfd	0:1.6.0-1.module+el8.5.0+694+f77f0bfd
`golang` Rocky Linux:8	before 0:1.16.12-1.module+el8.5.0+720+c057d5cf	0:1.16.12-1.module+el8.5.0+720+c057d5cf
`go-toolset` Rocky Linux:8	before 0:1.16.12-1.module+el8.5.0+720+c057d5cf	0:1.16.12-1.module+el8.5.0+720+c057d5cf
`grafana` Rocky Linux:8	before 0:7.5.9-5.el8_5	0:7.5.9-5.el8_5
`go1.16` SUSE:Linux Enterprise Module for Development Tools 15 SP2	before 1.16.12-1.37.2	1.16.12-1.37.2
`go1.16` SUSE:Linux Enterprise Module for Development Tools 15 SP3	before 1.16.12-1.37.2	1.16.12-1.37.2
`go1.16` SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS	before 1.16.12-1.37.2	1.16.12-1.37.2
`go1.16` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS	before 1.16.12-1.37.2	1.16.12-1.37.2
`go1.16` SUSE:Linux Enterprise Server 15 SP2-BCL	before 1.16.12-1.37.2	1.16.12-1.37.2
`go1.16` SUSE:Linux Enterprise Server 15 SP2-LTSS	before 1.16.12-1.37.2	1.16.12-1.37.2
`go1.16` SUSE:Linux Enterprise Server for SAP Applications 15 SP2	before 1.16.12-1.37.2	1.16.12-1.37.2
`go1.16` SUSE:Manager Proxy 4.1	before 1.16.12-1.37.2	1.16.12-1.37.2
`go1.16` SUSE:Manager Retail Branch Server 4.1	before 1.16.12-1.37.2	1.16.12-1.37.2
`go1.16` SUSE:Manager Server 4.1	before 1.16.12-1.37.2	1.16.12-1.37.2
`go1.16` SUSE:Enterprise Storage 7	before 1.16.12-1.37.2	1.16.12-1.37.2
`go1.17` SUSE:Linux Enterprise Module for Development Tools 15 SP2	before 1.17.5-1.14.2	1.17.5-1.14.2
`go1.17` SUSE:Linux Enterprise Module for Development Tools 15 SP3	before 1.17.5-1.14.2	1.17.5-1.14.2
`go1.17` SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS	before 1.17.5-1.14.2	1.17.5-1.14.2
`go1.17` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS	before 1.17.5-1.14.2	1.17.5-1.14.2
`go1.17` SUSE:Linux Enterprise Server 15 SP2-BCL	before 1.17.5-1.14.2	1.17.5-1.14.2
`go1.17` SUSE:Linux Enterprise Server 15 SP2-LTSS	before 1.17.5-1.14.2	1.17.5-1.14.2
`go1.17` SUSE:Linux Enterprise Server for SAP Applications 15 SP2	before 1.17.5-1.14.2	1.17.5-1.14.2
`go1.17` SUSE:Manager Proxy 4.1	before 1.17.5-1.14.2	1.17.5-1.14.2
`go1.17` SUSE:Manager Retail Branch Server 4.1	before 1.17.5-1.14.2	1.17.5-1.14.2
`go1.17` SUSE:Manager Server 4.1	before 1.17.5-1.14.2	1.17.5-1.14.2
`go1.17` SUSE:Enterprise Storage 7	before 1.17.5-1.14.2	1.17.5-1.14.2
`ardana-barbican` SUSE:OpenStack Cloud 9	before 9.0+git.1644879908.8a641c1-3.13.1	9.0+git.1644879908.8a641c1-3.13.1
`grafana` SUSE:OpenStack Cloud 9	before 6.7.4-3.26.1	6.7.4-3.26.1
`openstack-barbican` SUSE:OpenStack Cloud 9	before 7.0.1~dev24-3.14.1	7.0.1~dev24-3.14.1
`openstack-cinder` SUSE:OpenStack Cloud 9	before 13.0.10~dev24-3.34.2	13.0.10~dev24-3.34.2
`openstack-heat-gbp` SUSE:OpenStack Cloud 9	before 14.0.1~dev4-3.9.1	14.0.1~dev4-3.9.1
`openstack-horizon-plugin-gbp-ui` SUSE:OpenStack Cloud 9	before 14.0.1~dev3-3.9.1	14.0.1~dev3-3.9.1
`openstack-ironic` SUSE:OpenStack Cloud 9	before 11.1.5~dev18-3.28.2	11.1.5~dev18-3.28.2
`openstack-keystone` SUSE:OpenStack Cloud 9	before 14.2.1~dev9-3.28.2	14.2.1~dev9-3.28.2
`openstack-neutron` SUSE:OpenStack Cloud 9	before 13.0.8~dev206-3.40.1	13.0.8~dev206-3.40.1
`openstack-neutron-gbp` SUSE:OpenStack Cloud 9	before 14.0.1~dev33-3.31.1	14.0.1~dev33-3.31.1
`python-Pillow` SUSE:OpenStack Cloud 9	before 5.2.0-3.17.1	5.2.0-3.17.1
`python-XStatic-jquery-ui` SUSE:OpenStack Cloud 9	before 1.13.0.1-4.3.1	1.13.0.1-4.3.1
`python-lxml` SUSE:OpenStack Cloud 9	before 4.2.4-3.3.1	4.2.4-3.3.1
`release-notes-suse-openstack-cloud` SUSE:OpenStack Cloud 9	before 9.20220413-3.30.1	9.20220413-3.30.1
`venv-openstack-barbican` SUSE:OpenStack Cloud 9	before 7.0.1~dev24-3.35.2	7.0.1~dev24-3.35.2
`venv-openstack-cinder` SUSE:OpenStack Cloud 9	before 13.0.10~dev24-3.38.1	13.0.10~dev24-3.38.1
`venv-openstack-designate` SUSE:OpenStack Cloud 9	before 7.0.2~dev2-3.35.1	7.0.2~dev2-3.35.1
`venv-openstack-glance` SUSE:OpenStack Cloud 9	before 17.0.1~dev30-3.33.1	17.0.1~dev30-3.33.1
`venv-openstack-heat` SUSE:OpenStack Cloud 9	before 11.0.4~dev4-3.35.1	11.0.4~dev4-3.35.1
`venv-openstack-horizon` SUSE:OpenStack Cloud 9	before 14.1.1~dev11-4.39.1	14.1.1~dev11-4.39.1
`venv-openstack-ironic` SUSE:OpenStack Cloud 9	before 11.1.5~dev18-4.33.1	11.1.5~dev18-4.33.1
`venv-openstack-keystone` SUSE:OpenStack Cloud 9	before 14.2.1~dev9-3.36.1	14.2.1~dev9-3.36.1
`venv-openstack-magnum` SUSE:OpenStack Cloud 9	before 7.2.1~dev1-4.35.1	7.2.1~dev1-4.35.1
`venv-openstack-manila` SUSE:OpenStack Cloud 9	before 7.4.2~dev60-3.41.1	7.4.2~dev60-3.41.1
`venv-openstack-monasca` SUSE:OpenStack Cloud 9	before 2.7.1~dev10-3.37.1	2.7.1~dev10-3.37.1
`venv-openstack-monasca-ceilometer` SUSE:OpenStack Cloud 9	before 1.8.2~dev3-3.35.1	1.8.2~dev3-3.35.1
`venv-openstack-neutron` SUSE:OpenStack Cloud 9	before 13.0.8~dev206-6.39.1	13.0.8~dev206-6.39.1
`venv-openstack-nova` SUSE:OpenStack Cloud 9	before 18.3.1~dev91-3.39.1	18.3.1~dev91-3.39.1
`venv-openstack-octavia` SUSE:OpenStack Cloud 9	before 3.2.3~dev7-4.35.1	3.2.3~dev7-4.35.1
`venv-openstack-sahara` SUSE:OpenStack Cloud 9	before 9.0.2~dev15-3.35.1	9.0.2~dev15-3.35.1
`venv-openstack-swift` SUSE:OpenStack Cloud 9	before 2.19.2~dev48-2.30.1	2.19.2~dev48-2.30.1
`grafana` SUSE:OpenStack Cloud Crowbar 9	before 6.7.4-3.26.1	6.7.4-3.26.1
`openstack-barbican` SUSE:OpenStack Cloud Crowbar 9	before 7.0.1~dev24-3.14.1	7.0.1~dev24-3.14.1
`openstack-cinder` SUSE:OpenStack Cloud Crowbar 9	before 13.0.10~dev24-3.34.2	13.0.10~dev24-3.34.2
`openstack-heat-gbp` SUSE:OpenStack Cloud Crowbar 9	before 14.0.1~dev4-3.9.1	14.0.1~dev4-3.9.1
`openstack-horizon-plugin-gbp-ui` SUSE:OpenStack Cloud Crowbar 9	before 14.0.1~dev3-3.9.1	14.0.1~dev3-3.9.1
`openstack-ironic` SUSE:OpenStack Cloud Crowbar 9	before 11.1.5~dev18-3.28.2	11.1.5~dev18-3.28.2
`openstack-keystone` SUSE:OpenStack Cloud Crowbar 9	before 14.2.1~dev9-3.28.2	14.2.1~dev9-3.28.2
`openstack-neutron` SUSE:OpenStack Cloud Crowbar 9	before 13.0.8~dev206-3.40.1	13.0.8~dev206-3.40.1
`openstack-neutron-gbp` SUSE:OpenStack Cloud Crowbar 9	before 14.0.1~dev33-3.31.1	14.0.1~dev33-3.31.1
`python-Pillow` SUSE:OpenStack Cloud Crowbar 9	before 5.2.0-3.17.1	5.2.0-3.17.1
`python-XStatic-jquery-ui` SUSE:OpenStack Cloud Crowbar 9	before 1.13.0.1-4.3.1	1.13.0.1-4.3.1
`python-lxml` SUSE:OpenStack Cloud Crowbar 9	before 4.2.4-3.3.1	4.2.4-3.3.1
`release-notes-suse-openstack-cloud` SUSE:OpenStack Cloud Crowbar 9	before 9.20220413-3.30.1	9.20220413-3.30.1
`rubygem-sinatra` SUSE:OpenStack Cloud Crowbar 9	before 1.4.6-4.3.1	1.4.6-4.3.1
`ardana-ansible` SUSE:HPE Helion OpenStack 8	before 8.0+git.1660773729.3789a6d-3.85.1	8.0+git.1660773729.3789a6d-3.85.1
`ardana-cobbler` SUSE:HPE Helion OpenStack 8	before 8.0+git.1660773402.d845a45-3.47.1	8.0+git.1660773402.d845a45-3.47.1
`grafana` SUSE:HPE Helion OpenStack 8	before 6.7.4-4.23.1	6.7.4-4.23.1
`openstack-heat-templates` SUSE:HPE Helion OpenStack 8	before 0.0.0+git.1654529662.75fa04a-3.27.1	0.0.0+git.1654529662.75fa04a-3.27.1
`openstack-murano` SUSE:HPE Helion OpenStack 8	before 4.0.2~dev3-3.12.1	4.0.2~dev3-3.12.1
`openstack-murano-doc` SUSE:HPE Helion OpenStack 8	before 4.0.2~dev3-3.12.1	4.0.2~dev3-3.12.1
`python-Django` SUSE:HPE Helion OpenStack 8	before 1.11.29-3.42.1	1.11.29-3.42.1
`rabbitmq-server` SUSE:HPE Helion OpenStack 8	before 3.6.16-3.13.1	3.6.16-3.13.1
`venv-openstack-heat` SUSE:HPE Helion OpenStack 8	before 9.0.8~dev22-12.45.1	9.0.8~dev22-12.45.1
`venv-openstack-horizon-hpe` SUSE:HPE Helion OpenStack 8	before 12.0.5~dev6-14.48.1	12.0.5~dev6-14.48.1
`venv-openstack-murano` SUSE:HPE Helion OpenStack 8	before 4.0.2~dev3-12.38.1	4.0.2~dev3-12.38.1
`ardana-ansible` SUSE:OpenStack Cloud 8	before 8.0+git.1660773729.3789a6d-3.85.1	8.0+git.1660773729.3789a6d-3.85.1
`ardana-cobbler` SUSE:OpenStack Cloud 8	before 8.0+git.1660773402.d845a45-3.47.1	8.0+git.1660773402.d845a45-3.47.1
`grafana` SUSE:OpenStack Cloud 8	before 6.7.4-4.23.1	6.7.4-4.23.1
`openstack-heat-templates` SUSE:OpenStack Cloud 8	before 0.0.0+git.1654529662.75fa04a-3.27.1	0.0.0+git.1654529662.75fa04a-3.27.1
`openstack-murano` SUSE:OpenStack Cloud 8	before 4.0.2~dev3-3.12.1	4.0.2~dev3-3.12.1
`openstack-murano-doc` SUSE:OpenStack Cloud 8	before 4.0.2~dev3-3.12.1	4.0.2~dev3-3.12.1
`python-Django` SUSE:OpenStack Cloud 8	before 1.11.29-3.42.1	1.11.29-3.42.1
`rabbitmq-server` SUSE:OpenStack Cloud 8	before 3.6.16-3.13.1	3.6.16-3.13.1
`venv-openstack-heat` SUSE:OpenStack Cloud 8	before 9.0.8~dev22-12.45.1	9.0.8~dev22-12.45.1
`venv-openstack-horizon` SUSE:OpenStack Cloud 8	before 12.0.5~dev6-14.48.1	12.0.5~dev6-14.48.1
`venv-openstack-murano` SUSE:OpenStack Cloud 8	before 4.0.2~dev3-12.38.1	4.0.2~dev3-12.38.1
`grafana` SUSE:OpenStack Cloud Crowbar 8	before 6.7.4-4.23.1	6.7.4-4.23.1
`openstack-heat-templates` SUSE:OpenStack Cloud Crowbar 8	before 0.0.0+git.1654529662.75fa04a-3.27.1	0.0.0+git.1654529662.75fa04a-3.27.1
`openstack-murano` SUSE:OpenStack Cloud Crowbar 8	before 4.0.2~dev3-3.12.1	4.0.2~dev3-3.12.1
`openstack-murano-doc` SUSE:OpenStack Cloud Crowbar 8	before 4.0.2~dev3-3.12.1	4.0.2~dev3-3.12.1
`python-Django` SUSE:OpenStack Cloud Crowbar 8	before 1.11.29-3.42.1	1.11.29-3.42.1
`rabbitmq-server` SUSE:OpenStack Cloud Crowbar 8	before 3.6.16-3.13.1	3.6.16-3.13.1
`rubygem-puma` SUSE:OpenStack Cloud Crowbar 8	before 2.16.0-3.18.1	2.16.0-3.18.1
`golang-golang-x-net-dev` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 0.0+git20150226.3d87fd6-30.0+git20151007.b846920+dfsg-11:0.0+git20150817.66f0418-11:0.0+git20160110.4fd4a9f-11:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm11:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm2	None known
`google-guest-agent` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 20201217.02-0ubuntu1~16.04.020230426.00-0ubuntu2~16.04.320231004.02-0ubuntu1~16.04.120231004.02-0ubuntu1~16.04.220240716.00-0ubuntu1~16.04.020240716.00-0ubuntu1~16.04.0+esm120240716.00-0ubuntu1~16.04.0+esm220240716.00-0ubuntu1~16.04.0+esm3	None known
`golang-1.8` Ubuntu:18.04:LTS	All versions, plus listed versions 1.8.3-2ubuntu11.8.3-2ubuntu1.18.04.1	None known
`golang-golang-x-net-dev` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 1:0.0+git20170629.c81e7f2+dfsg-1ubuntu11:0.0+git20170629.c81e7f2+dfsg-1ubuntu21:0.0+git20170629.c81e7f2+dfsg-21:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm11:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm21:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm3	None known
`google-guest-agent` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 20201217.02-0ubuntu1~18.04.020210414.00-0ubuntu1~18.04.020210629.00-0ubuntu1~18.04.120220622.00-0ubuntu2~18.04.020220622.00-0ubuntu2~18.04.1 Show 8 moreShow less 20230426.00-0ubuntu2~18.04.020231004.02-0ubuntu1~18.04.220231004.02-0ubuntu1~18.04.320240716.00-0ubuntu1~18.04.020241011.01-0ubuntu1~18.04.020241011.01-0ubuntu1~18.04.0+esm120241011.01-0ubuntu1~18.04.0+esm220241011.01-0ubuntu1~18.04.0+esm3	None known
`google-guest-agent` Ubuntu:20.04:LTS	before 20231004.02-0ubuntu1~20.04.3, plus listed versions 20201217.02-0ubuntu1~20.04.020210414.00-0ubuntu1~20.04.020210629.00-0ubuntu1~20.04.020220622.00-0ubuntu2~20.04.020220622.00-0ubuntu2~20.04.220230426.00-0ubuntu2~20.04.020231004.02-0ubuntu1~20.04.120231004.02-0ubuntu1~20.04.2	20231004.02-0ubuntu1~20.04.3
`golang-golang-x-net-dev` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 1:0.0+git20190811.74dc4d7+dfsg-11:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm11:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm21:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm3	None known
`golang-1.17` Ubuntu:22.04:LTS	All versions, plus listed versions 1.17-1ubuntu21.17.3-1ubuntu11.17.3-1ubuntu21.17.13-3ubuntu11.17.13-3ubuntu1.21.17.13-3ubuntu1.3	None known
`google-guest-agent` Ubuntu:22.04:LTS	before 20231004.02-0ubuntu1~22.04.3, plus listed versions 20210629.00-0ubuntu120210629.00-0ubuntu220220104.00-0ubuntu120220104.00-0ubuntu220220622.00-0ubuntu2~22.04.0 Show 4 moreShow less 20220622.00-0ubuntu2~22.04.120230426.00-0ubuntu2~22.04.020231004.02-0ubuntu1~22.04.120231004.02-0ubuntu1~22.04.2	20231004.02-0ubuntu1~22.04.3
`go1.16` openSUSE:Leap 15.2	before 1.16.12-lp152.20.1	1.16.12-lp152.20.1
`go1.16` openSUSE:Leap 15.3	before 1.16.12-1.37.2	1.16.12-1.37.2
`go1.17` openSUSE:Leap 15.3	before 1.17.5-1.14.2	1.17.5-1.14.2
`apptainer` openSUSE:Leap 15.4	before 1.1.2-lp154.2.1	1.1.2-lp154.2.1
`go1.16` openSUSE:Tumbleweed	before 1.16.12-1.1	1.16.12-1.1
`go1.17` openSUSE:Tumbleweed	before 1.17.5-1.1	1.17.5-1.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	affected, aliases, references	OSV
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-44716 is a high vulnerability (CVSS 7.5) in Golang Go, published December 15, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.25%, the 91st percentile. Fixed in golang.org/x/net/http2 0.0.0-20211209124913-491a49abca63.