VDB
GO-2025-3563
GO-2025-3563
PUBLISHED
Record from OSV · Published April 8, 2025
Request smuggling due to acceptance of invalid chunked data in net/http
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| traefik-fips-2.11 | Chainguard | 2.11.22-r1 |
| yq | Chainguard | 4.45.1-r5 |
| checksec | Wolfi | 3.0.2-r1 |
| helm-operator | Wolfi | 1.39.2-r1 |
| modelmesh-runtime-adapter | Chainguard | 0.12.0-r12 |
| kubeflow-katib | Wolfi | 0.19.0-r40, 0.19.0-r31 |
| falcosidekick | Wolfi | 2.31.1-r8 |
| crossplane | Wolfi | 1.19.1-r1 |
| conftest-fips | Chainguard | 0.59.0-r0 |
| grafana-mimir | Chainguard | 2.16.0-r1 |
| ksops | Chainguard | 4.3.3-r8 |
| ko | Chainguard | 0.17.1-r11 |
88 more packages have a fixed version. See every fix in Lookup.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | traefik-fips-2.11 | 0 |
| chainguard | yq | 0 |
| wolfi | checksec | 0 |
| wolfi | helm-operator | 0 |
| chainguard | modelmesh-runtime-adapter | 0 |
| wolfi | kubeflow-katib | 0, 0 |
| wolfi | falcosidekick | 0 |
| wolfi | crossplane | 0 |
| chainguard | conftest-fips | 0 |
| chainguard | grafana-mimir | 0 |
| chainguard | ksops | 0 |
| chainguard | ko | 0 |
| wolfi | addon-resizer | 0 |
| chainguard | libnvidia-container | 0 |
| chainguard | contour-fips-1.30 | 0 |
| wolfi | nodetaint | 0 |
| wolfi | splunk-otel-collector | 0 |
| wolfi | aws-signer-notation-plugin | 0 |
| chainguard | cass-operator-fips-no-pvc-delete | 0 |
| chainguard | kubernetes-csi-driver-nfs-fips | 0 |
…and 1056 more
Timeline
- Apr 8, 2025 CVE Published
- Feb 17, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GO-2025-3563
vulnetix vdb fixes GO-2025-3563Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GO-2025-3563/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart