-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability was patched by wrapping the operation in a database transaction with xorm session. The commit diff shows the critical change occurred in AddCollection where: 1) A transaction was added 2) An existence check was performed within the transaction 3) Insert operation was made atomic with the check. This directly addresses CWE-362 and CWE-365 by preventing concurrent execution from creating duplicate entries through proper synchronization. The other modified files appear to be documentation/Swagger spec updates unrelated to the race condition.
GoGo| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/answerdev/answer | go | < 1.0.4 | 1.0.4 |
Ongoing coverage of React2Shell