Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Go records in CISA KEVNo Go vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 40
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0087 · Published 2025-02-26 · Partial fix · 0.27.0 CWE-1286
