CVE-2025-61724

Medium CVSS: 5.3

The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption.

Vendor

Golang

Product

CWE

CWE-770

Yayın Tarihi

2025-10-29 23:16:20

Güncelleme

2026-01-29 15:30:53

Source Identifier

security@golang.org

KEV Date Added

Kategoriler

CWE-770 Go MEDIUM Golang 2025

Referanslar

https://go.dev/cl/709859 https://go.dev/issue/75716 https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI https://pkg.go.dev/vuln/GO-2025-4015 http://www.openwall.com/lists/oss-security/2025/10/08/1

Benzer Kayıtlar

Critical

CVE-2025-68121

During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between th…

High

CVE-2025-61732

A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.

Low

CVE-2025-22873

It was possible to improperly access the parent directory of an os.Root by opening a filename ending in "../". For examp…

High

CVE-2025-68119

Downloading and building modules with malicious version strings can cause local code execution. On systems with Mercuria…

High

CVE-2025-61731

Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of…

High

CVE-2025-61726

The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query p…