CVE-2023-45286

CVE-2023-45286 concerns a race condition in the Go HTTP client library go-resty/resty/v2. When request retries are enabled, calling sync.Pool.Put on the same bytes.Buffer more than once may yield a buffer that hasn’t been Reset, causing the HTTP request body from a prior request to be appended to...