Search for packages
| purl | pkg:deb/debian/golang-1.24@1.24.2-1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-7y8a-8can-nba1 | RoadRunner is at risk of HTTP Request/Response Smuggling through vulnerable dependency The net/http package dependency used by RoadRunner improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext. |
CVE-2025-22871
GHSA-g9pc-8g42-g6vq |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T09:16:07.397682+00:00 | Debian Importer | Fixing | VCID-7y8a-8can-nba1 | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-11T18:11:44.253451+00:00 | Debian Importer | Fixing | VCID-7y8a-8can-nba1 | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-03T07:25:39.234330+00:00 | Debian Importer | Fixing | VCID-7y8a-8can-nba1 | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |