DEBIAN-CVE-2025-47907

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2025-47907
Published: 07 Aug 2025, 16:15
Last modified:28 Apr 2026, 20:30

Vulnerability Summary

Overall Risk (default)
medium
28/100
CVSS Score
7 HIGH
3.1 (osv_debian)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

07 Aug 2025, 16:15
Published
Vulnerability first disclosed
28 Apr 2026, 20:30
Last Modified
Vulnerability information updated

Description

Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.

CVSS Metrics

  • v3.1•HIGH•Score: 7CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L

Affected Systems

  • debian•golang-1.15

    all

  • debian•golang-1.19

    all

  • debian•golang-1.24

    < 1.24.7-1 | all

References (1)