{"id":"CVE-2021-36221","aliases":["ALPINE-CVE-2021-36221","ALSA-2021:4156","BELL-CVE-2021-36221","BIT-golang-2021-36221","DEBIAN-CVE-2021-36221","DLA-2891-1","DLA-2892-1","DLA-3395-1","EUVD-2021-22841","GHSA-6qcx-qr4g-4fx9","GO-2021-0245","MGASA-2021-0416","OESA-2021-1402","RHSA-2021:4156","RHSA-2021:4765","RHSA-2022:0557","RHSA-2022:1276","RHSA-2022:1361","RHSA-2022:7457","RLSA-2021:4156","RLSA-2022:7457","SUSE-SU-2021:2787-1","SUSE-SU-2021:2788-1","UBUNTU-CVE-2021-36221","openSUSE-SU-2021:1199-1","openSUSE-SU-2021:1207-1","openSUSE-SU-2021:2787-1","openSUSE-SU-2021:2788-1","openSUSE-SU-2024:10808-1","openSUSE-SU-2024:10809-1"],"status":"published","title":"Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http...","description":"Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.03114,"percentile":0.87993,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-362"],"published":"2021-08-08T00:00:00Z","modified":"2026-11-03T06:31:42Z","fixes":[{"ecosystem":"Alpine:v3.13","package":"go","fixed_in":["1.15.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"go","fixed_in":["1.16.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"go","fixed_in":["1.16.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"go","fixed_in":["1.16.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"go","fixed_in":["1.16.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"go","fixed_in":["1.16.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"go","fixed_in":["1.16.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"go","fixed_in":["1.16.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"go","fixed_in":["1.16.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"go","fixed_in":["1.16.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"go","fixed_in":["1.16.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"go","fixed_in":["1.16.7-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"golang","fixed_in":["1.15.15","1.16.7"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"golang-1.15","fixed_in":["1.15.15-1~deb11u1"],"sources":["osv"]},{"ecosystem":"Go","package":"stdlib","fixed_in":["1.15.15","1.16.7"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"golang","fixed_in":["1.15.15-1.mga8"],"sources":["osv"]},{"ecosystem":"Red Hat:serverless:1.0::el8","package":"openshift-serverless-clients","fixed_in":["0:0.25.1-1.el8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"go1.15","fixed_in":["1.15.15-1.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"go1.15","fixed_in":["1.15.15-1.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"go1.15","fixed_in":["1.15.15-1.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"go1.15","fixed_in":["1.15.15-1.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"go1.15","fixed_in":["1.15.15-1.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"go1.15","fixed_in":["1.15.15-1.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"go1.15","fixed_in":["1.15.15-1.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.0","package":"go1.15","fixed_in":["1.15.15-1.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"go1.15","fixed_in":["1.15.15-1.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.0","package":"go1.15","fixed_in":["1.15.15-1.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"go1.15","fixed_in":["1.15.15-1.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"go1.16","fixed_in":["1.16.7-1.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"go1.16","fixed_in":["1.16.7-1.23.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"go1.16","fixed_in":["1.16.7-lp152.8.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"go1.15","fixed_in":["1.15.15-lp152.26.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"go1.15","fixed_in":["1.15.15-1.39.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"go1.16","fixed_in":["1.16.7-1.23.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.15.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.7-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"delve","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-1.module_el8.5.0+2604+960c7771"}]}],"bundled":4},{"source":"osv","ecosystem":"Bitnami","package":"golang","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.15.15"},{"introduced":"1.16.0"},{"fixed":"1.16.7"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"golang-1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.15-1~deb11u1"}]}],"versions":["1.15.9-6"]},{"source":"osv","ecosystem":"Debian:9","package":"golang-1.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-1+deb9u4"}]}],"versions":["1.8.1-1","1.8.1-1+deb9u1","1.8.1-1+deb9u2","1.8.1-1+deb9u3"],"bundled":6},{"source":"osv","ecosystem":"Debian:9","package":"golang-1.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-2+deb9u4"}]}],"versions":["1.7.4-2","1.7.4-2+deb9u1","1.7.4-2+deb9u2","1.7.4-2+deb9u3"],"bundled":6},{"source":"osv","ecosystem":"Debian:10","package":"golang-1.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.6-1+deb10u6"}]}],"versions":["1.11.6-1","1.11.6-1+deb10u1","1.11.6-1+deb10u2","1.11.6-1+deb10u3","1.11.6-1+deb10u4","1.11.6-1+deb10u5"],"bundled":10},{"source":"osv","ecosystem":"Go","package":"stdlib","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.15.15"},{"introduced":"1.16.0-0"},{"fixed":"1.16.7"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.15-1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.7-5.oe1"}]}],"bundled":8},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.7-5.oe1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0-1.module+el8.5.0+10379+d6b83bd0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0-1.module+el8.5.0+10379+d6b83bd0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0-1.module+el8.5.0+10379+d6b83bd0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"go-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.7-1.module+el8.5.0+12246+1aac4e3f"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.7-1.module+el8.5.0+12246+1aac4e3f"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.7-1.module+el8.5.0+12246+1aac4e3f"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.7-1.module+el8.5.0+12246+1aac4e3f"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.7-1.module+el8.5.0+12246+1aac4e3f"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-race","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.7-1.module+el8.5.0+12246+1aac4e3f"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.7-1.module+el8.5.0+12246+1aac4e3f"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.7-1.module+el8.5.0+12246+1aac4e3f"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:serverless:1.0::el8","package":"openshift-serverless-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.25.1-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.1-17.rhaos4.9.git3029b1d.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.1-17.rhaos4.9.git3029b1d.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"butane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.1-2.rhaos4.9.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"butane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.1-2.rhaos4.9.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"butane-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.1-2.rhaos4.9.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"butane-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.1-2.rhaos4.9.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.1-17.rhaos4.9.git3029b1d.2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.1-17.rhaos4.9.git3029b1d.2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.1-17.rhaos4.9.git3029b1d.2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.0-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.0-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"cri-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.0-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"golang-github-prometheus-promu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-5.git642a960.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.0-3.rhaos4.9.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"ignition-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.0-3.rhaos4.9.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"ignition-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.0-3.rhaos4.9.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"ignition-validate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.0-3.rhaos4.9.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"ignition-validate-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.0-3.rhaos4.9.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"prometheus-promu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-5.git642a960.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-202202111950.p0.gb93fd35.assembly.stream.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el7","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-202202140924.p0.g340e212.assembly.stream.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el7","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-202202140924.p0.g340e212.assembly.stream.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-202202111950.p0.gb93fd35.assembly.stream.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-202202111950.p0.gb93fd35.assembly.stream.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-202202140924.p0.g340e212.assembly.stream.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-202202140924.p0.g340e212.assembly.stream.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-202202111950.p0.gb93fd35.assembly.stream.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.0::el8","package":"servicemesh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.9-3.el8"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.0::el8","package":"servicemesh-istioctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.9-3.el8"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.0::el8","package":"servicemesh-mixc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.9-3.el8"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.0::el8","package":"servicemesh-mixs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.9-3.el8"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.0::el8","package":"servicemesh-pilot-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.9-3.el8"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.0::el8","package":"servicemesh-pilot-discovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.9-3.el8"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.0::el8","package":"kiali","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:v1.24.7.redhat1-1.el8"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.0::el8","package":"servicemesh-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.0-16.el8.1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.0::el8","package":"servicemesh-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.9-3.el8"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:openshift_data_foundation:4.10::el8","package":"mcg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.0-72.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift_data_foundation:4.10::el8","package":"mcg-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.10.0-72.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.1.0-4.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.27.0-2.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.27.0-2.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.27.0-2.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.27.0-2.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.27.0-2.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:53-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.4-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.4-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.4-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.189.0-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-40.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.1.0-6.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.2.0-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.4-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.4-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.4-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.2-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.2-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.2-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.9.2-1.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-2.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-2.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-2.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.3-0.6.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.3-0.6.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.3-0.6.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.3-0.6.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-3.module+el8.7.0+16772+33343656"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"delve","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0-1.module+el8.5.0+694+f77f0bfd"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.7-1.module+el8.5.0+694+f77f0bfd"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"go-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.7-1.module+el8.5.0+694+f77f0bfd"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:53-1.module+el8.7.0+1078+e72fcd4f"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1.4-1.module+el8.7.0+1077+0e4f03d4"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.module+el8.7.0+1078+e72fcd4f"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.module+el8.6.0+1054+50b00ff4"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.189.0-1.module+el8.7.0+1076+9b1c11c1"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.189.0-1.module+el8.6.0+1054+50b00ff4"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.7.0+1077+0e4f03d4"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.5.0+710+4c471e88"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.6.0+1054+50b00ff4"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-1.module+el8.7.0+1077+0e4f03d4"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-1.module+el8.6.0+1054+50b00ff4"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9-1.module+el8.7.0+1077+0e4f03d4"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9-1.module+el8.6.0+1054+50b00ff4"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.7.0+1077+0e4f03d4"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.5.0+710+4c471e88"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.6.0+1054+50b00ff4"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.module+el8.7.0+1078+e72fcd4f"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.module+el8.6.0+1054+50b00ff4"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.4-1.module+el8.7.0+1077+0e4f03d4"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-2.module+el8.7.0+1078+e72fcd4f"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-2.module+el8.6.0+1054+50b00ff4"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.3-0.6.module+el8.7.0+1078+e72fcd4f"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.3-0.6.module+el8.6.0+1054+50b00ff4"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-3.module+el8.7.0+1077+0e4f03d4"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-3.module+el8.6.0+971+69b94baf"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"go1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.15-1.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"go1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.15-1.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"go1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.15-1.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"go1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.15-1.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"go1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.15-1.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"go1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.15-1.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"go1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.15-1.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"go1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.15-1.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"go1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.15-1.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"go1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.15-1.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"go1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.15-1.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"go1.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.7-1.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"go1.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.7-1.23.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"golang-1.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10.4-2ubuntu1~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"golang-1.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10.4-2ubuntu1~16.04.1","1.10.4-2ubuntu1~16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"golang-1.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6-0ubuntu1","1.6-0ubuntu2","1.6-0ubuntu3","1.6-0ubuntu4","1.6-0ubuntu5","1.6.1-0ubuntu1","1.6.2-0ubuntu5~16.04","1.6.2-0ubuntu5~16.04.2","1.6.2-0ubuntu5~16.04.3","1.6.2-0ubuntu5~16.04.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.8-1ubuntu1~16.04.2","1.13.8-1ubuntu1~16.04.3","1.13.8-1ubuntu1~16.04.3+esm2","1.13.8-1ubuntu1~16.04.3+esm3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-1.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10~rc1-1","1.10~rc1-1ubuntu1","1.10~rc1-2ubuntu1","1.10~rc2-1ubuntu1","1.10-1ubuntu1","1.10.1-1ubuntu2","1.10.4-2ubuntu1~18.04.1","1.10.4-2ubuntu1~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.8-1ubuntu1~18.04.2","1.13.8-1ubuntu1~18.04.3","1.13.8-1ubuntu1~18.04.4","1.13.8-1ubuntu1~18.04.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"golang-1.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.16.2-0ubuntu1~18.04.2","1.16.2-0ubuntu1~18.04.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-1.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.3-2ubuntu1","1.8.3-2ubuntu1.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-1.9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.1-2ubuntu1","1.9.2-1ubuntu1","1.9.2-3ubuntu1","1.9.3-1ubuntu1","1.9.4-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.1-1ubuntu1","1.13.3-1ubuntu1","1.13.4-1ubuntu1","1.13.5-1ubuntu1","1.13.6-1ubuntu1","1.13.6-2ubuntu1","1.13.7-1ubuntu1","1.13.8-1ubuntu1","1.13.8-1ubuntu1.1","1.13.8-1ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.14~beta1-1","1.14~beta1-2","1.14~rc1-1","1.14-1","1.14.1-1","1.14.2-1","1.14.2-1ubuntu1","1.14.3-2ubuntu2~20.04.1","1.14.3-2ubuntu2~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"golang-1.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.16.2-0ubuntu1~20.04","1.16.2-0ubuntu1~20.04.1","1.16.2-0ubuntu1~20.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.8-1ubuntu2","1.13.8-1ubuntu2.22.04.1","1.13.8-1ubuntu2.22.04.1+esm1","1.13.8-1ubuntu2.22.04.2"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"go1.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.7-lp152.8.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"go1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.15-lp152.26.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"go1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.15-1.39.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"go1.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.7-1.23.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"go1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.15-1.2"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"go1.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.8-1.1"}]}],"bundled":10}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"golang","product":"go"},{"vendor":"oracle","product":"timesten_in-memory_database"},{"vendor":"siemens","product":"scalance_lpe9403_firmware"}],"references":[{"url":"https://groups.google.com/forum/#%21forum/golang-announce","tags":["x_transferred","web"]},{"url":"https://groups.google.com/g/golang-announce/c/JvWG9FUUYT0","tags":["x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J4AMYYHGBYMIWCCR5RCDFI5RAUJOPO5L/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MU47VKTNXX33ZDLTI2ORRUY3KLJKU6G/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HM7U5JNS5WU66Q3S26PFIU2ITB2ATTQ4/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/uHACNfXAZqk","tags":["x_transferred","Mailing List","Third Party Advisory","advisory","web","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/01/msg00016.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/01/msg00017.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://security.gentoo.org/glsa/202208-02","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/04/msg00021.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-36221","tags":["web","advisory"]},{"url":"https://groups.google.com/forum/#!forum/golang-announce"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MU47VKTNXX33ZDLTI2ORRUY3KLJKU6G/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HM7U5JNS5WU66Q3S26PFIU2ITB2ATTQ4/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J4AMYYHGBYMIWCCR5RCDFI5RAUJOPO5L/"},{"url":"https://github.com/advisories/GHSA-6qcx-qr4g-4fx9"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-36221","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-33195","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-33197","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-33198","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-36221","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-36221","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-36221","tags":["advisory"]},{"url":"https://go.dev/cl/333191","tags":["fix"]},{"url":"https://go.googlesource.com/go/+/b7a85e0003cedb1b48a1fd3ae5b746ec6330102e","tags":["fix"]},{"url":"https://go.dev/issue/46866","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2021-0416.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29391","tags":["report"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2021-August/009314.html","tags":["web"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2021-August/009321.html","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QBLRS3I4ZUSJEMER3J6HA6RD4XDIQYHC/","tags":["web","advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7FPUQARVFSVTNWXPM6OPHZLDEEMVSSM3/","tags":["web","advisory"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1402","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33195","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33196","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33197","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33198","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-34558","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-29923","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-38297","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4156","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972825","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976168","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979100","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1989564","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1989570","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1989575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995656","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4156.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33195","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33195","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/RgCMkAEQjSI","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33197","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33197","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33198","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33198","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-36221","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-36221","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4765","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2016255","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4765.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0557","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1992006","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0557.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-29923","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-29923","tags":["advisory"]},{"url":"https://sick.codes/sick-2021-016/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-44716","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030801","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-44716","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44716","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/hcmEScgc00k","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-44717","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030806","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-44717","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44717","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1276","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1913333","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1913338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954368","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1999784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030787","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050746","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050748","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050758","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057277","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2061638","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1276.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28851","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28851","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28851","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28852","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28852","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28852","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3121","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3121","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3121","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3749","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3749","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3749","tags":["advisory"]},{"url":"https://github.com/axios/axios/commit/5b457116e31db0e88fede6c428e969e87f290929","tags":["article"]},{"url":"https://huntr.dev/bounties/1e8f07fc-c384-4ff9-8498-0690de2e8c31","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-29482","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-29482","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-29482","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-43565","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-43565","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43565","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-43824","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-43824","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43824","tags":["advisory"]},{"url":"https://github.com/envoyproxy/envoy/security/advisories/GHSA-vj5m-rch8-5r2p","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-43825","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-43825","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43825","tags":["advisory"]},{"url":"https://github.com/envoyproxy/envoy/security/advisories/GHSA-h69p-g6xg-mhhh","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-43826","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-43826","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43826","tags":["advisory"]},{"url":"https://github.com/envoyproxy/envoy/security/advisories/GHSA-cmx3-fvgf-83mf","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-21654","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-21654","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21654","tags":["advisory"]},{"url":"https://github.com/envoyproxy/envoy/security/advisories/GHSA-5j4x-g36v-m283","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-21655","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-21655","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21655","tags":["advisory"]},{"url":"https://github.com/envoyproxy/envoy/security/advisories/GHSA-7r5p-7fmh-jxpg","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23606","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23606","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23606","tags":["advisory"]},{"url":"https://github.com/envoyproxy/envoy/security/advisories/GHSA-9vp2-4cp7-vvxf","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23635","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23635","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23635","tags":["advisory"]},{"url":"https://istio.io/latest/news/security/istio-security-2022-003","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24726","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24726","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24726","tags":["advisory"]},{"url":"https://istio.io/latest/news/security/istio-security-2022-004/","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1361","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2026342","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1361.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7457","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1820551","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941727","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1945929","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1974423","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996050","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2005866","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2009264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2009346","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2027662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2028408","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2039045","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2052697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053990","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055313","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2059666","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2062697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064702","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2066145","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2068006","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072452","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073958","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2078925","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2079759","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2079761","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2081836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2083570","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2083997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2085361","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2086398","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2086757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2090609","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2090920","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2093079","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2094610","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2094875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2095097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2096264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2097865","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2100740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2102140","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2102361","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2102381","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2113941","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2117699","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2117928","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2118231","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2119072","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2120651","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2121453","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7457.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-41190","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-41190","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41190","tags":["advisory"]},{"url":"https://github.com/moby/moby/security/advisories/GHSA-xmmx-7jpf-fx42","tags":["article"]},{"url":"https://github.com/opencontainers/distribution-spec/security/advisories/GHSA-mc8v-mgrf-8f4m","tags":["article"]},{"url":"https://github.com/opencontainers/image-spec/security/advisories/GHSA-77vh-xpmg-72qh","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1708","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1708","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1708","tags":["advisory"]},{"url":"https://github.com/cri-o/cri-o/security/advisories/GHSA-fcm2-6c3h-pg6j","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2990","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2990","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2990","tags":["advisory"]},{"url":"https://www.benthamsgaze.org/2022/08/22/vulnerability-in-linux-containers-investigation-and-mitigation/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-27191","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-27191","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27191","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/-cp44ypCT5s/m/wmegxkLiAQAJ","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-29162","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-29162","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29162","tags":["advisory"]},{"url":"https://github.com/opencontainers/runc/security/advisories/GHSA-f3fp-gc8g-vw66","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2021:4156","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7457","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212787-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1175132","tags":["report"]},{"url":"https://bugzilla.suse.com/1188906","tags":["report"]},{"url":"https://bugzilla.suse.com/1189162","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-36221","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212788-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1182345","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-36221","tags":["report"]},{"url":"https://github.com/golang/go/issues/46866","tags":["report"]},{"url":"https://github.com/golang/go/commit/b7a85e0003cedb1b48a1fd3ae5b746ec6330102e","tags":["report"]},{"url":"https://github.com/golang/go/commit/accf363d5da864521c90b152fb734f3f15e00521","tags":["report"]},{"url":"https://github.com/golang/go/commit/ba93baa74a52d57ae79313313ea990cc791ef50e","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5LR4TSGW4J25HER35GR4VSKSJCKQY4GC/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5YUFZSLKF2GBNSU2QJCJH73WU2LSGQ5O/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2020-24553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-27918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-31525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-34558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-27919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-39293","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-36221","description":"Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.","status":"published","published":"2021-08-08T00:00:00Z","modified":"2024-08-04T00:54:50.729Z","updated_at":"2026-11-02T14:33:06.32268Z"}],"euvd":[{"id":"EUVD-2021-22841","description":"Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.","status":"published","published":"2021-08-08T00:00:00Z","modified":"2024-08-04T00:54:50Z","updated_at":"2026-11-03T03:24:29.877227Z"}],"ghsa":[{"id":"GHSA-6qcx-qr4g-4fx9","title":"Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http...","description":"Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.","status":"published","published":"2022-05-24T19:10:24Z","modified":"2023-04-20T00:30:43Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:54:32.269335Z"}],"nvd":[{"id":"CVE-2021-36221","description":"Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.","status":"published","published":"2021-08-08T06:15:08.74Z","modified":"2026-06-17T03:58:32.71Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:06:56.562207Z"}],"osv":[{"id":"ALPINE-CVE-2021-36221","description":"Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.","status":"published","published":"2021-08-08T06:15:08.74Z","modified":"2026-11-03T06:31:42.940503908Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:18:15.355745Z"},{"id":"BELL-CVE-2021-36221","title":"CVE-2021-36221 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:54.852326Z","modified":"2026-01-26T09:30:00.931508Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-36221","description":"Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.","status":"published","published":"2021-08-08T06:15:08.74Z","modified":"2026-10-24T10:30:59.347598236Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:20.434873Z"},{"id":"DEBIAN-CVE-2021-36221","description":"Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.","status":"published","published":"2021-08-08T06:15:08.74Z","modified":"2026-08-27T23:04:05.096184992Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:35.233346Z"},{"id":"OESA-2021-1402","title":"golang security update","description":"The go programming language\r\n\r\nSecurity Fix(es):\r\n\r\nGo before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection (e.g., XSS) that does not conform to the RFC1035 format.(CVE-2021-33195)\n\nIn archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count (in an archive s header) can cause a NewReader or OpenReader panic.(CVE-2021-33196)\n\nIn Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary headers.(CVE-2021-33197)\n\nIn Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method.(CVE-2021-33198)\n\nThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.(CVE-2021-34558)\n\nGo before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation. This affects net.ParseIP and net.ParseCIDR.(CVE-2021-29923)\n\nGo before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module, when GOARCH=wasm GOOS=js is used.(CVE-2021-38297)\n\nGo before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.(CVE-2021-36221)","status":"published","published":"2021-10-27T11:04:40Z","modified":"2026-08-18T01:16:06.608548299Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2021:4156","title":"Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update","status":"published","published":"2024-10-21T18:02:02Z","modified":"2026-08-05T10:09:36Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:4765","title":"Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.19.0","status":"published","published":"2024-09-30T14:18:28Z","modified":"2026-06-29T10:38:28Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0557","title":"Red Hat Security Advisory: OpenShift Container Platform 4.9.22 security update","status":"published","published":"2024-09-30T14:19:15Z","modified":"2026-08-15T10:01:53Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1276","title":"Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.0.9 security update","status":"published","published":"2024-09-30T14:20:27Z","modified":"2026-10-17T10:01:26Z","cvss":[{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1361","title":"Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.10.0 RPM security,enhancement\u0026bugfix update","status":"published","published":"2024-09-30T14:20:35Z","modified":"2026-10-14T10:01:59Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:7457","title":"Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update","status":"published","published":"2024-10-21T18:11:28Z","modified":"2026-10-09T10:05:13Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RLSA-2021:4156","title":"Moderate: go-toolset:rhel8 security, bug fix, and enhancement update","description":"Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. \n\nThe following packages have been upgraded to a later upstream version: golang (1.16.7). (BZ#1938071)\n\nSecurity Fix(es):\n\n* golang: net: lookup functions may return invalid host names (CVE-2021-33195)\n\n* golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty (CVE-2021-33197)\n\n* golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents (CVE-2021-33198)\n\n* golang: net/http/httputil: panic due to racy read of persistConn after handler panic (CVE-2021-36221)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.","status":"published","published":"2021-11-09T08:25:49Z","modified":"2026-02-04T11:15:11.249218Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"RLSA-2022:7457","title":"Moderate: container-tools:rhel8 security, bug fix, and enhancement update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* golang: net/http/httputil: panic due to racy read of persistConn after handler panic (CVE-2021-36221)\n\n* cri-o: memory exhaustion on the node when access to the kube api (CVE-2022-1708)\n\n* golang: crash in a golang.org/x/crypto/ssh server (CVE-2022-27191)\n\n* opencontainers: OCI manifest and index parsing confusion (CVE-2021-41190)\n\n* buildah: possible information disclosure and modification (CVE-2022-2990)\n\n* runc: incorrect handling of inheritable capabilities (CVE-2022-29162)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.","status":"published","published":"2022-11-08T06:20:07Z","modified":"2026-02-05T05:00:14.346317Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2021-36221","description":"Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.","status":"published","published":"2021-08-08T06:15:00Z","modified":"2025-10-24T04:50:26Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:27.870979Z"},{"id":"ALSA-2021:4156","title":"Moderate: go-toolset:rhel8 security, bug fix, and enhancement update","description":"Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. \n\nThe following packages have been upgraded to a later upstream version: golang (1.16.7). (BZ#1938071)\n\nSecurity Fix(es):\n\n* golang: net: lookup functions may return invalid host names (CVE-2021-33195)\n\n* golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty (CVE-2021-33197)\n\n* golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents (CVE-2021-33198)\n\n* golang: net/http/httputil: panic due to racy read of persistConn after handler panic (CVE-2021-36221)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2021-11-09T08:25:49Z","modified":"2026-10-29T11:00:34.190476029Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"BIT-golang-2021-36221","description":"Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.","status":"published","published":"2024-03-06T11:04:26.67Z","modified":"2026-10-16T09:45:16.334214444Z","updated_at":"2026-11-02T15:28:30.70064Z"},{"id":"DLA-2891-1","title":"golang-1.8 - security update","status":"published","published":"2022-01-21T00:00:00Z","modified":"2026-03-09T01:20:28.60547Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DLA-2892-1","title":"golang-1.7 - security update","status":"published","published":"2022-01-21T00:00:00Z","modified":"2026-03-09T01:23:01.364917Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DLA-3395-1","title":"golang-1.11 - security update","status":"published","published":"2023-04-19T00:00:00Z","modified":"2026-03-09T01:20:27.682779Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"GO-2021-0245","title":"Panic in ReverseProxy in net/http/httputil","description":"ReverseProxy can panic after encountering a problem copying a proxied response body.","status":"published","published":"2022-02-17T17:32:24Z","modified":"2024-05-20T16:03:47Z","updated_at":"2026-11-02T15:47:00.604718Z"},{"id":"MGASA-2021-0416","title":"Updated golang packages fix security vulnerability","description":"The updated golang packages fix a security vulnerability:\n\nGo before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can\nlead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler\nabort (CVE-2021-36221).\n","status":"published","published":"2021-09-04T17:01:38Z","modified":"2026-04-16T04:42:15.740009664Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2021:1199-1","title":"Security update for go1.16","description":"This update for go1.16 fixes the following issues:\n\nUpdate to go1.16.7:\n\n- go#47473 net/http: panic due to racy read of persistConn after handler panic (CVE-2021-36221 bsc#1189162)\n- go#47348 cmd/go: 'go list -f '{{.Stale}}'' stack overflow with cyclic imports\n- go#47332 time: Timer reset broken under heavy use since go1.16 timer optimizations added\n- go#47289 cmd/link: build error with cgo in Windows, redefinition of go.map.zero\n- go#47015 cmd/go: go mod vendor: open C:\\Users\\LICENSE: Access is denied.\n- go#46928 cmd/compile: register conflict between external linker and duffzero on arm64\n- go#46858 runtime: ppc64x binaries randomly segfault on linux 5.13rc6\n- go#46551 cmd/go: unhelpful error message when running 'go install' on a replaced-but-not-required package\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-08-25T22:05:55Z","modified":"2026-02-04T03:57:12.109766Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:1207-1","title":"Security update for go1.15","description":"This update for go1.15 fixes the following issues:\n\nUpdate to go1.15.15:\n\n- go#47473 net/http: panic due to racy read of persistConn after handler panic (CVE-2021-36221 bsc#1189162)\n- go#47347 cmd/go: 'go list -f '{{.Stale}}'' stack overflow with cyclic imports\n- go#47014 cmd/go: go mod vendor: open C:\\Users\\LICENSE: Access is denied.\n- go#46927 cmd/compile: register conflict between external linker and duffzero on arm64\n- go#46857 runtime: ppc64x binaries randomly segfault on linux 5.13rc6\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-08-27T18:07:35Z","modified":"2026-02-04T02:58:28.601297Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:2787-1","title":"Security update for go1.15","description":"This update for go1.15 fixes the following issues:\n\nUpdate to go1.15.15:\n\n- go#47473 net/http: panic due to racy read of persistConn after handler panic (CVE-2021-36221 bsc#1189162)\n- go#47347 cmd/go: 'go list -f '{{.Stale}}'' stack overflow with cyclic imports\n- go#47014 cmd/go: go mod vendor: open C:\\Users\\LICENSE: Access is denied.\n- go#46927 cmd/compile: register conflict between external linker and duffzero on arm64\n- go#46857 runtime: ppc64x binaries randomly segfault on linux 5.13rc6\n","status":"published","published":"2021-08-20T08:04:25Z","modified":"2026-02-04T04:04:35.621372Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:2788-1","title":"Security update for go1.16","description":"This update for go1.16 fixes the following issues:\n\nUpdate to go1.16.7:\n\n- go#47473 net/http: panic due to racy read of persistConn after handler panic (CVE-2021-36221 bsc#1189162)\n- go#47348 cmd/go: 'go list -f '{{.Stale}}'' stack overflow with cyclic imports\n- go#47332 time: Timer reset broken under heavy use since go1.16 timer optimizations added\n- go#47289 cmd/link: build error with cgo in Windows, redefinition of go.map.zero\n- go#47015 cmd/go: go mod vendor: open C:\\Users\\LICENSE: Access is denied.\n- go#46928 cmd/compile: register conflict between external linker and duffzero on arm64\n- go#46858 runtime: ppc64x binaries randomly segfault on linux 5.13rc6\n- go#46551 cmd/go: unhelpful error message when running 'go install' on a replaced-but-not-required package\n","status":"published","published":"2021-08-20T08:06:18Z","modified":"2026-02-04T03:37:43.537861Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2024:10808-1","title":"go1.15-1.15.15-1.2 on GA media","description":"These are all security issues fixed in the go1.15-1.15.15-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:46:55.765323Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:10809-1","title":"go1.16-1.16.8-1.1 on GA media","description":"These are all security issues fixed in the go1.16-1.16.8-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:16:42.475775Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2021:2787-1","title":"Security update for go1.15","description":"This update for go1.15 fixes the following issues:\n\nUpdate to go1.15.15:\n\n- go#47473 net/http: panic due to racy read of persistConn after handler panic (CVE-2021-36221 bsc#1189162)\n- go#47347 cmd/go: 'go list -f '{{.Stale}}'' stack overflow with cyclic imports\n- go#47014 cmd/go: go mod vendor: open C:\\Users\\LICENSE: Access is denied.\n- go#46927 cmd/compile: register conflict between external linker and duffzero on arm64\n- go#46857 runtime: ppc64x binaries randomly segfault on linux 5.13rc6\n","status":"published","published":"2021-08-20T08:04:43Z","modified":"2026-02-04T02:27:57.57059Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:2788-1","title":"Security update for go1.16","description":"This update for go1.16 fixes the following issues:\n\nUpdate to go1.16.7:\n\n- go#47473 net/http: panic due to racy read of persistConn after handler panic (CVE-2021-36221 bsc#1189162)\n- go#47348 cmd/go: 'go list -f '{{.Stale}}'' stack overflow with cyclic imports\n- go#47332 time: Timer reset broken under heavy use since go1.16 timer optimizations added\n- go#47289 cmd/link: build error with cgo in Windows, redefinition of go.map.zero\n- go#47015 cmd/go: go mod vendor: open C:\\Users\\LICENSE: Access is denied.\n- go#46928 cmd/compile: register conflict between external linker and duffzero on arm64\n- go#46858 runtime: ppc64x binaries randomly segfault on linux 5.13rc6\n- go#46551 cmd/go: unhelpful error message when running 'go install' on a replaced-but-not-required package\n","status":"published","published":"2021-08-20T08:06:17Z","modified":"2026-02-04T03:32:46.556089Z","updated_at":"2026-11-02T15:53:49.605187Z"}]}}