cve.bz

CVE-2020-15586

5.9 mediumEPSS 2.9%

Medium (5.9). EPSS 2.9% chance of exploitation in the next 30 days. Fixed in stdlib 1.13.13, 1.14.5.

Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time.

Severity

CVSS 3.1

5.9 medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
2.9% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
CWE
CWE-362
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GO-2021-0224Gostdlib<1.13.13
>=1.14.0-0 <1.14.5		1.13.13, 1.14.5

References

Check your stackJSON