-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems directly from the PartitionMessage function as shown by: 1) CVE/GHSA descriptions explicitly name this function 2) Commit diff shows critical logic changes in this function's chunk boundary handling 3) Test cases added specifically for 2000/4000/6000 character cases 4) Patch modifies the chunkEnd calculation from 'chunkOffset + limits.ChunkSize' to 'nextChunkStart - 1' to prevent index overflow. The function's role in message splitting makes it the clear entry point for the resource consumption vulnerability.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/containrrr/shoutrrr | go | < 0.6.0 | 0.6.0 |