TI-2025-16743 CVE-2025-22871 · GHSA-g9pc-8g42-g6vq
Request smuggling due to acceptance of invalid chunked data in net/http
Priority MEDIUM 49
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines.
RHSA-2025:9844
osbuild-composer security update
Released 2025-06-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) osbuild-composer-101-4.el8_10, osbuild-composer-core-101-4.el8_10, osbuild-composer-worker-101-4.el8_10