Go/github.com/jasonlovesdoggo/abacus CVE-2025-27421: high 7.5, EPSS 0.41%

Goroutine Leak in Abacus SSE Implementation

Action: Upgrade github.com/jasonlovesdoggo/abacus to 0.0.0-20250302043802-898ff1204e11 or later.

go get github.com/jasonlovesdoggo/abacus@v0.0.0-20250302043802-898ff1204e11

Affected

Fixed versions

Sources

• osv: GHSA-vh64-54px-qgf8
• https://github.com/JasonLovesDoggo/abacus/security/advisories/GHSA-vh64-54px-qgf8
• https://nvd.nist.gov/vuln/detail/CVE-2025-27421
• https://github.com/JasonLovesDoggo/abacus/commit/78fdb9b48b7f6d08ed0cd41077509c0a97071552
• https://github.com/JasonLovesDoggo/abacus/commit/898ff1204e11317cc161240b660e63eed5a72b33
• https://github.com/JasonLovesDoggo/abacus
• https://pkg.go.dev/vuln/GO-2025-3498

CVE-2025-27421 · published 2025-03-03T16:21:46Z · modified 2025-03-11T17:17:30Z · JSON