-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from unrestricted response body reading in the REST handler. In Go implementations, ioutil.ReadAll() is commonly used for reading HTTP response bodies, and its use without size limits would directly cause memory exhaustion. The router module's REST handler (RestHandler.ServeHTTP) is the entry point for these requests, making it the logical location for this vulnerability. The description explicitly mentions the REST handler's response handling as the root cause, aligning with this pattern.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/kubeedge/kubeedge | go | >= 1.11.0, < 1.11.1 | 1.11.1 |
| github.com/kubeedge/kubeedge | go | >= 1.10.0, < 1.10.2 | 1.10.2 |
| github.com/kubeedge/kubeedge | go | < 1.9.4 | 1.9.4 |
GoGoOngoing coverage of React2Shell