Skip to main content
New to Testkube? Unleash the power of cloud native testing in Kubernetes with Testkube. Get Started >

nats-server-config-reloader-0.17.2_linux_arm64

digestsha256:306c51201608109916e73d6a2b74d2e0051dff1d2146982673a33bbf24854d7b
vulnerabilitiescritical: 1 high: 0 medium: 0 low: 0
platformlinux/arm64
size5.2 MB
packages23
critical: 1 high: 0 medium: 0 low: 0 stdlib 1.24.1 (golang)

pkg:golang/stdlib@1.24.1

# Dockerfile (38:38)
COPY --from=deps /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/

critical : CVE--2025--22871

Affected range
>=1.24.0-0
<1.24.2
Fixed version1.24.2
EPSS Score0.018%
EPSS Percentile3rd percentile
Description

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.