VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 30, 2019· Updated Aug 5, 2024

CVE-2019-16276

CVE-2019-16276

Description

Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.

Affected products

5

Patches

2
b17fd8e49d24

[release-branch.go1.13-security] go1.13.1

https://github.com/golang/goFilippo ValsordaSep 25, 2019via osv
commit
1 file changed · +1 −1
  • VERSION+1 −1 modified
    @@ -1 +1 @@
-go1.13
\ No newline at end of file
+go1.13.1
\ No newline at end of file
6c15c7cce718

[release-branch.go1.12-security] go1.12.10

https://github.com/golang/goFilippo ValsordaSep 25, 2019via osv
commit
1 file changed · +1 −1
  • VERSION+1 −1 modified
    @@ -1 +1 @@
-go1.12.9
\ No newline at end of file
+go1.12.10
\ No newline at end of file

Vulnerability mechanics

Generated on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

13

News mentions

0

No linked articles in our index yet.