CVE-2025-47907

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2025-47907
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-47907.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-47907
Aliases
Downstream
Related
Published
2025-08-07T16:15:30Z
Modified
2025-08-11T06:27:06.746398Z
Summary
[none]
Details

Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.

References

Affected packages

Debian:11 / golang-1.15

Package

Name
golang-1.15
Purl
pkg:deb/debian/golang-1.15?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.15.9-6
1.15.15-1~deb11u1
1.15.15-1~deb11u2
1.15.15-1~deb11u3
1.15.15-1~deb11u4
1.15.15-1
1.15.15-2
1.15.15-3
1.15.15-4
1.15.15-5

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / golang-1.19

Package

Name
golang-1.19
Purl
pkg:deb/debian/golang-1.19?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.19.8-2
1.19.9-1
1.19.10-1
1.19.10-2
1.19.11-1
1.19.12-1
1.19.12-2~bpo11+1
1.19.12-2~bpo12+1
1.19.12-2
1.19.13-1~bpo11+1
1.19.13-1~bpo12+1
1.19.13-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / golang-1.24

Package

Name
golang-1.24
Purl
pkg:deb/debian/golang-1.24?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.24.4-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}