PT-2025-42739 · Golang+4 · Golang+4

Jub0Bs · CVE-2025-58186 · Published 2025-01-01 · Updated 2026-07-30

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions golang versions 1.15 and 1.19

Description A flaw exists in the cookie parsing functionality of the net/http package. An absence of limits during cookie parsing can lead to excessive memory consumption, potentially resulting in memory exhaustion.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

ALT-PU-2025-12749

ALT-PU-2025-13232

AZL-69140

AZL-69254

AZL-78911

BDU:2025-14529

BIT-GOLANG-2025-58186

CLEANSTART-2025-EU07511

CLEANSTART-2026-BI19096

CLEANSTART-2026-CL67452

CLEANSTART-2026-DG85765

CLEANSTART-2026-DK89443

CLEANSTART-2026-DX24417

CLEANSTART-2026-EH36582

CLEANSTART-2026-ES72297

CLEANSTART-2026-GK50991

CLEANSTART-2026-HO16255

CLEANSTART-2026-HP74907

CLEANSTART-2026-IC09970

CLEANSTART-2026-JL47330

CLEANSTART-2026-JV11945

CLEANSTART-2026-JW97006

CLEANSTART-2026-JY65496

CLEANSTART-2026-KF61159

CLEANSTART-2026-KK19266

CLEANSTART-2026-KL41807

CLEANSTART-2026-KQ90880

CLEANSTART-2026-LA96053

CLEANSTART-2026-LC57158

CLEANSTART-2026-LD38774

CLEANSTART-2026-LY84798

CLEANSTART-2026-MR40751

CLEANSTART-2026-MW42038

CLEANSTART-2026-NE76010

CLEANSTART-2026-OK95571

CLEANSTART-2026-OO10146

CLEANSTART-2026-PF69993

CLEANSTART-2026-PH30270

CLEANSTART-2026-PX55932

CLEANSTART-2026-QT53274

CLEANSTART-2026-RF77222

CLEANSTART-2026-RT37134

CLEANSTART-2026-RV11606

CLEANSTART-2026-RY70255

CLEANSTART-2026-SA78596

CLEANSTART-2026-SA81922

CLEANSTART-2026-SF49994

CLEANSTART-2026-SO47947

CLEANSTART-2026-ST87963

CLEANSTART-2026-TE81995

CLEANSTART-2026-TF97968

CLEANSTART-2026-UL50886

CLEANSTART-2026-UR38994

CLEANSTART-2026-VN16911

CLEANSTART-2026-VR76068

CLEANSTART-2026-VY69341

CLEANSTART-2026-WE55349

CLEANSTART-2026-WF25734

CLEANSTART-2026-WO16430

CLEANSTART-2026-WP03591

CLEANSTART-2026-WW79343

CLEANSTART-2026-WX54555

CLEANSTART-2026-XI63678

CLEANSTART-2026-XP01012

CLEANSTART-2026-XR35583

CLEANSTART-2026-XS86531

CLEANSTART-2026-XV43582

CLEANSTART-2026-XZ28830

CLEANSTART-2026-YT82900

CLEANSTART-2026-ZL51442

CLEANSTART-2026-ZN46983

CLEANSTART-2026-ZT09801

CLEANSTART-2026-ZU45532

CLEANSTART-2026-ZW09225

CVE-2025-58186

ECHO-5D63-3B88-E70A

GO-2025-4012

MGASA-2025-0256

OPENSUSE-SU-2025:15608-1

OPENSUSE-SU-2025:15609-1

OPENSUSE-SU-2025:15695-1

OPENSUSE-SU-2025:15723-1

OPENSUSE-SU-2025:20157-1

OPENSUSE-SU-2025:20158-1

OPENSUSE-SU-2026:20301-1

OPENSUSE-SU-2026:20308-1

OPENSUSE-SU-2026:21483-1

RHSA-2026:7291

RHSA-2026:7385

SUSE-SU-2025:03547-1

SUSE-SU-2025:21192-1

SUSE-SU-2025:21193-1

SUSE-SU-2025:3682-1

SUSE-SU-2026:0296-1

SUSE-SU-2026:0297-1

SUSE-SU-2026:0298-1

SUSE-SU-2026:0308-1

SUSE-SU-2026:20623-1

SUSE-SU-2026:20629-1

Affected Products

Alt Linux

Debian

Red Os

Suse

Golang

References · 2301

• https://osv.dev/vulnerability/CLEANSTART-2026-ES72297 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-ZN46983 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-46595 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-WW79343 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-1229 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-30836 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:20629-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-32281 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-EH36582 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-58186 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58185 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-22866 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-33814 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-39832 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15609-1 · Vendor Advisory