[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-47910":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T20:55:33.689Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":15,"downstream":16,"duplicates":45,"related":46,"reserved_at":9,"published_at":217,"modified_at":218,"state":219,"summary":220,"references_raw":229,"kevs":251,"epss":252,"epss_history":255,"metrics":515,"affected":523},"CVE-2025-47910","When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.",null,[],[],[13,14],"GO-2025-3955","BIT-golang-2025-47910",[],[17,19,21,23,25,27,29,31,33,35,37,39,41,43],{"_key":18},"SUSE-SU-2026:0297-1",{"_key":20},"SUSE-SU-2025:3799-1",{"_key":22},"SUSE-SU-2026:0298-1",{"_key":24},"SUSE-SU-2025:03524-1",{"_key":26},"SUSE-SU-2025:21192-1",{"_key":28},"SUSE-SU-2025:03200-1",{"_key":30},"SUSE-SU-2025:03525-1",{"_key":32},"OPENSUSE-SU-2025:15525-1",{"_key":34},"OPENSUSE-SU-2025:15574-1",{"_key":36},"OPENSUSE-SU-2025:20157-1",{"_key":38},"DEBIAN-CVE-2025-47910",{"_key":40},"UBUNTU-CVE-2025-47910",{"_key":42},"RHSA-2026:7291",{"_key":44},"RHSA-2026:7385",[],[47,48,49,50,51,52,53,54,55,56,57,58,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,145,147,149,151,153,155,157,159,161,163,165,167,169,171,173,175,177,179,181,183,185,187,189,191,193,195,197,199,201,203,205,207,209,211,213,215],{"_key":18},{"_key":20},{"_key":22},{"_key":24},{"_key":26},{"_key":28},{"_key":30},{"_key":32},{"_key":34},{"_key":36},{"_key":42},{"_key":44},{"_key":60},"CGA-3492-GF8R-2RF8",{"_key":62},"CGA-39FM-F3RQ-RCMJ",{"_key":64},"CGA-3PM8-73C6-9M82",{"_key":66},"CGA-44HR-JFMP-3J92",{"_key":68},"CGA-44XX-43G7-MPJ2",{"_key":70},"CGA-463W-J7XW-QHF3",{"_key":72},"CGA-492G-4HVR-7773",{"_key":74},"CGA-49J5-7QFQ-H6RC",{"_key":76},"CGA-4FQ6-3JPC-PQF3",{"_key":78},"CGA-4QJC-R587-7H26",{"_key":80},"CGA-4R55-XJ22-Q9HF",{"_key":82},"CGA-5625-5WX5-XW6X",{"_key":84},"CGA-5HC8-4G8P-6HXW",{"_key":86},"CGA-5HW2-H3G7-6QX9",{"_key":88},"CGA-5M22-33VF-H778",{"_key":90},"CGA-5W36-M9C4-G5QJ",{"_key":92},"CGA-6G32-75JC-M6C7",{"_key":94},"CGA-6G8X-24V7-6CR3",{"_key":96},"CGA-6XCF-X754-CJFC",{"_key":98},"CGA-7582-X5RF-324P",{"_key":100},"CGA-7JJX-2J68-5WFH",{"_key":102},"CGA-7Q27-CM8P-JP39",{"_key":104},"CGA-864J-C66X-5CF4",{"_key":106},"CGA-868F-RM9W-VGF4",{"_key":108},"CGA-8C4W-3CC8-297G",{"_key":110},"CGA-8M7G-PGXM-C529",{"_key":112},"CGA-8XPH-7PC4-678M",{"_key":114},"CGA-9884-8JQC-7CXM",{"_key":116},"CGA-9JCF-46M3-V55R",{"_key":118},"CGA-9MFC-592M-56F7",{"_key":120},"CGA-9Q4W-5RFW-55CQ",{"_key":122},"CGA-C524-M767-3724",{"_key":124},"CGA-C59F-9X67-XXRV",{"_key":126},"CGA-CM4P-GH47-447C",{"_key":128},"CGA-CMM5-J65R-P3XF",{"_key":130},"CGA-CPG8-WQH6-JV6J",{"_key":132},"CGA-F4PJ-364M-FHQ6",{"_key":134},"CGA-F6J9-M5J5-GVQX",{"_key":136},"CGA-F9X9-2599-68VH",{"_key":138},"CGA-G252-W5RX-XPG6",{"_key":140},"CGA-G443-7937-RQPH",{"_key":142},"CGA-G7PC-R4HW-4FW6",{"_key":144},"CGA-GG82-J539-454H",{"_key":146},"CGA-GWCV-6H5C-FFXW",{"_key":148},"CGA-H34J-QGGW-J3GV",{"_key":150},"CGA-HJ73-83J9-CPHP",{"_key":152},"CGA-HP65-GF9G-R3V4",{"_key":154},"CGA-HXCJ-FJHW-CHJM",{"_key":156},"CGA-J4J2-H85J-9385",{"_key":158},"CGA-J8HG-F9H6-JFQH",{"_key":160},"CGA-J9WF-XMQW-VJPH",{"_key":162},"CGA-JJQ5-VJ8R-F28Q",{"_key":164},"CGA-JXQF-7M3G-67P3",{"_key":166},"CGA-M73P-72FC-6MQV",{"_key":168},"CGA-M86P-PMW4-RGJV",{"_key":170},"CGA-MC4R-7378-VV45",{"_key":172},"CGA-MJR7-96Q6-R8J6",{"_key":174},"CGA-P8PV-9427-5J56",{"_key":176},"CGA-Q2HG-G9VW-4WQR",{"_key":178},"CGA-QPFX-CJ4J-F3GC",{"_key":180},"CGA-R24J-Q8W7-36F6",{"_key":182},"CGA-RCX7-H8PF-4X4P",{"_key":184},"CGA-RJ56-22FR-J6X5",{"_key":186},"CGA-RJ9X-RQ6F-5HWM",{"_key":188},"CGA-V2GQ-P74M-HC8H",{"_key":190},"CGA-V58C-C6HX-GCCM",{"_key":192},"CGA-V5RQ-2MFP-M825",{"_key":194},"CGA-VCV3-V4X4-FQR8",{"_key":196},"CGA-VVPW-MJC5-C8CW",{"_key":198},"CGA-VWR8-G62W-76W8",{"_key":200},"CGA-W6H2-3FQF-P3V6",{"_key":202},"CGA-W9CG-QXXG-2XX7",{"_key":204},"CGA-WM55-VHGR-2V6Q",{"_key":206},"CGA-X9HG-G6R5-H938",{"_key":208},"CGA-XCCR-723F-9G94",{"_key":210},"CGA-XF35-XCR5-JC95",{"_key":212},"CGA-XHJR-Q3MV-M5VQ",{"_key":214},"CGA-XRCQ-WP83-C346",{"_key":216},"CGA-5WHR-7566-G2WP","2025-09-22T21:01:55.440Z","2025-09-24T13:29:45.405Z","Deferred",{"cisa_kev":221,"cisa_ransomware":221,"cisa_vendor":9,"epss_severity":222,"epss_score":223,"severity":224,"severity_score":225,"severity_version":226,"severity_source":227,"severity_vector":228,"severity_status":219},false,"low",0.00012,"medium",5.4,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",[230,237,242,247],{"url":231,"sources":232,"tags":235},"https://go.dev/cl/699275",[227,233,234],"nvd","osv_go",[236],"FIX",{"url":238,"sources":239,"tags":240},"https://go.dev/issue/75054",[227,233,234],[241],"REPORT",{"url":243,"sources":244,"tags":245},"https://groups.google.com/g/golang-announce/c/PtW9VW21NPs/m/DJhMQ-m5AQAJ",[227,233,234],[246],"WEB",{"url":248,"sources":249,"tags":250},"https://pkg.go.dev/vuln/GO-2025-3955",[227,233],[],[],{"date":253,"score":223,"percentile":254},"2026-06-04",0.01937,[256,260,263,266,269,272,275,278,281,283,286,289,292,295,298,302,305,308,311,314,317,320,323,326,329,332,335,338,341,344,347,350,353,356,359,362,365,368,371,374,377,380,382,385,388,390,392,394,396,399,402,405,408,410,412,415,418,420,423,425,427,430,432,434,436,438,441,444,447,450,453,456,458,461,464,467,470,473,476,479,483,486,489,492,495,498,501,504,508,512],{"date":257,"score":258,"percentile":259},"2025-11-04",0.00011,0.00928,{"date":261,"score":258,"percentile":262},"2025-11-05",0.00938,{"date":264,"score":258,"percentile":265},"2025-11-06",0.00943,{"date":267,"score":258,"percentile":268},"2025-11-07",0.00945,{"date":270,"score":258,"percentile":271},"2025-11-08",0.00944,{"date":273,"score":258,"percentile":274},"2025-11-09",0.00942,{"date":276,"score":258,"percentile":277},"2025-11-10",0.00933,{"date":279,"score":258,"percentile":280},"2025-11-11",0.00936,{"date":282,"score":258,"percentile":280},"2025-11-12",{"date":284,"score":258,"percentile":285},"2025-11-13",0.00937,{"date":287,"score":258,"percentile":288},"2025-11-14",0.00941,{"date":290,"score":258,"percentile":291},"2025-11-15",0.00965,{"date":293,"score":258,"percentile":294},"2025-11-16",0.00966,{"date":296,"score":258,"percentile":297},"2025-11-17",0.00962,{"date":299,"score":300,"percentile":301},"2025-11-18",0.00033,0.05289,{"date":303,"score":300,"percentile":304},"2025-11-19",0.05316,{"date":306,"score":300,"percentile":307},"2025-11-20",0.05361,{"date":309,"score":258,"percentile":310},"2025-11-21",0.01009,{"date":312,"score":258,"percentile":313},"2025-11-22",0.01004,{"date":315,"score":258,"percentile":316},"2025-11-23",0.00995,{"date":318,"score":258,"percentile":319},"2025-11-24",0.00994,{"date":321,"score":258,"percentile":322},"2025-11-25",0.00991,{"date":324,"score":258,"percentile":325},"2025-11-26",0.00924,{"date":327,"score":258,"percentile":328},"2025-11-27",0.00922,{"date":330,"score":258,"percentile":331},"2025-11-28",0.00929,{"date":333,"score":223,"percentile":334},"2025-11-29",0.01364,{"date":336,"score":223,"percentile":337},"2025-11-30",0.01373,{"date":339,"score":223,"percentile":340},"2025-12-01",0.01398,{"date":342,"score":223,"percentile":343},"2025-12-02",0.01391,{"date":345,"score":223,"percentile":346},"2025-12-03",0.0139,{"date":348,"score":223,"percentile":349},"2025-12-04",0.01368,{"date":351,"score":223,"percentile":352},"2025-12-05",0.01382,{"date":354,"score":223,"percentile":355},"2025-12-06",0.01387,{"date":357,"score":223,"percentile":358},"2025-12-07",0.01383,{"date":360,"score":223,"percentile":361},"2025-12-08",0.01384,{"date":363,"score":223,"percentile":364},"2025-12-09",0.01399,{"date":366,"score":223,"percentile":367},"2025-12-10",0.0141,{"date":369,"score":223,"percentile":370},"2025-12-11",0.01405,{"date":372,"score":223,"percentile":373},"2025-12-12",0.01409,{"date":375,"score":223,"percentile":376},"2025-12-13",0.01396,{"date":378,"score":223,"percentile":379},"2025-12-14",0.01388,{"date":381,"score":223,"percentile":361},"2025-12-15",{"date":383,"score":223,"percentile":384},"2025-12-16",0.01389,{"date":386,"score":223,"percentile":387},"2025-12-17",0.01392,{"date":389,"score":223,"percentile":358},"2025-12-18",{"date":391,"score":223,"percentile":379},"2025-12-19",{"date":393,"score":223,"percentile":379},"2025-12-20",{"date":395,"score":223,"percentile":364},"2025-12-21",{"date":397,"score":223,"percentile":398},"2025-12-22",0.01401,{"date":400,"score":223,"percentile":401},"2025-12-23",0.014,{"date":403,"score":223,"percentile":404},"2025-12-24",0.01403,{"date":406,"score":223,"percentile":407},"2025-12-25",0.01406,{"date":409,"score":223,"percentile":373},"2025-12-26",{"date":411,"score":223,"percentile":404},"2025-12-27",{"date":413,"score":223,"percentile":414},"2025-12-28",0.01402,{"date":416,"score":223,"percentile":417},"2025-12-29",0.01393,{"date":419,"score":223,"percentile":379},"2025-12-30",{"date":421,"score":223,"percentile":422},"2025-12-31",0.01386,{"date":424,"score":223,"percentile":407},"2026-01-01",{"date":426,"score":223,"percentile":367},"2026-01-02",{"date":428,"score":223,"percentile":429},"2026-01-03",0.01413,{"date":431,"score":223,"percentile":358},"2026-01-04",{"date":433,"score":223,"percentile":387},"2026-01-05",{"date":435,"score":223,"percentile":355},"2026-01-06",{"date":437,"score":223,"percentile":387},"2026-01-07",{"date":439,"score":223,"percentile":440},"2026-01-08",0.01407,{"date":442,"score":223,"percentile":443},"2026-01-09",0.01422,{"date":445,"score":223,"percentile":446},"2026-01-10",0.01433,{"date":448,"score":223,"percentile":449},"2026-01-11",0.01431,{"date":451,"score":223,"percentile":452},"2026-01-12",0.01415,{"date":454,"score":223,"percentile":455},"2026-01-13",0.01414,{"date":457,"score":223,"percentile":452},"2026-01-14",{"date":459,"score":223,"percentile":460},"2026-01-15",0.01427,{"date":462,"score":223,"percentile":463},"2026-01-16",0.01435,{"date":465,"score":223,"percentile":466},"2026-01-17",0.01439,{"date":468,"score":223,"percentile":469},"2026-01-18",0.01451,{"date":471,"score":223,"percentile":472},"2026-01-19",0.0144,{"date":474,"score":223,"percentile":475},"2026-01-20",0.01426,{"date":477,"score":223,"percentile":478},"2026-01-21",0.01421,{"date":480,"score":481,"percentile":482},"2026-01-22",0.00015,0.02281,{"date":484,"score":481,"percentile":485},"2026-01-23",0.0229,{"date":487,"score":481,"percentile":488},"2026-01-24",0.0231,{"date":490,"score":481,"percentile":491},"2026-01-25",0.02303,{"date":493,"score":481,"percentile":494},"2026-01-26",0.02299,{"date":496,"score":481,"percentile":497},"2026-01-27",0.02301,{"date":499,"score":481,"percentile":500},"2026-01-28",0.02306,{"date":502,"score":481,"percentile":503},"2026-01-29",0.02327,{"date":505,"score":506,"percentile":507},"2026-01-30",0.00009,0.00738,{"date":509,"score":510,"percentile":511},"2026-01-31",0.00008,0.00625,{"date":513,"score":510,"percentile":514},"2026-02-01",0.00633,[516,521],{"source":227,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":517,"cvss_v4_0":9},{"baseScore":225,"baseSeverity":518,"vectorString":228,"impactScore":519,"exploitabilityScore":520},"MEDIUM",4.2,7.2,{"source":233,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":522,"cvss_v4_0":9},{"baseScore":225,"baseSeverity":518,"vectorString":228,"impactScore":519,"exploitabilityScore":520},[524,536],{"ecosystem":9,"name":525,"vendor":526,"product":525,"cpe_part":527,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":528},"net/http","go standard library","a",[529],{"version":530,"is_range":531,"range_type":227,"version_start":532,"version_start_type":533,"version_end":534,"version_end_type":535,"fixed_in":9},">= 1.25.0, \u003C 1.25.1",true,"1.25.0","including","1.25.1","excluding",{"ecosystem":537,"name":538,"vendor":537,"product":538,"cpe_part":9,"purl_type":539,"purl_namespace":9,"purl_name":538,"source":9,"versions":540},"Go","stdlib","golang",[541],{"version":542,"is_range":531,"range_type":543,"version_start":532,"version_start_type":533,"version_end":534,"version_end_type":535,"fixed_in":9},"gte1_25_0_lt1_25_1","semver"]