Skip to main content
New to Testkube? Unleash the power of cloud native testing in Kubernetes with Testkube. Get Started >

nats-server-config-reloader-0.17.2_linux_amd64

digestsha256:65f3b70ec5a100743844cc8b73989f12ea9ba360fdd23069b20bdbd2654d9b94
vulnerabilitiescritical: 1 high: 0 medium: 0 low: 0
platformlinux/amd64
size4.9 MB
packages23
critical: 1 high: 0 medium: 0 low: 0 stdlib 1.24.1 (golang)

pkg:golang/stdlib@1.24.1

# Dockerfile (38:38)
COPY --from=deps /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/

critical : CVE--2025--22871

Affected range
>=1.24.0-0
<1.24.2
Fixed version1.24.2
EPSS Score0.018%
EPSS Percentile3rd percentile
Description

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.