CLEANSTART-2026-OJ41940 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines

🗓️ 30 Jan 2026 15:13:53Reported by GoogleType

osv🔗 osv.dev👁 36 Views

Security vulnerabilities in the ingress-nginx-controller library; net/http wrongly accepts a bare line feed as a chunked data terminator.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Go affects IBM Robotic Process Automation for Cloud Pak	6 Aug 202513:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.0-IF005 and 24.0.1-IF002.	2 May 202507:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities which can affect IBM Storage Scale cloudkit and CES S3 are now addressed. (CVE-2025-22868, CVE-2025-22869)	9 May 202520:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses axios-1.7.7.tgz, Kubectl-1.22.4 and Websphere Liberty - 24.0.0.11 which is vulnerable to CVE-2025-27152, CVE-2024-47535, CVE-2024-24791, CVE-2024-45336, CVE-2024.	30 May 202513:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	25 Jun 202513:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple vulnerabilities	31 Jul 202514:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services for October 2025 - Multiple CVEs addressed	3 Dec 202506:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	10 Dec 202516:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple nodejs and go packages which is vulnerable to " CVE-2025-27152, CVE-2025-32996, CVE-2025-32997, CVE-2025-22871"	4 Aug 202507:13	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion HCI and IBM Fusion HCI for watsonx	31 May 202514:07	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-OJ41940
osv	www.osv.dev/vulnerability/CVE-2024-45336
osv	www.osv.dev/vulnerability/CVE-2024-45341
osv	www.osv.dev/vulnerability/CVE-2025-0913
osv	www.osv.dev/vulnerability/CVE-2025-22866
osv	www.osv.dev/vulnerability/CVE-2025-22868
osv	www.osv.dev/vulnerability/CVE-2025-22871
osv	www.osv.dev/vulnerability/CVE-2025-22872
osv	www.osv.dev/vulnerability/CVE-2025-4673
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-45336

09 Sep 2026 12:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.19.8

EPSS0.0087