CVE-2025-1386 — Query smuggling in ch-go library
When using the ch-go library, under a specific condition when the query includes a large, uncompressed malicious external data, it is possible for an attacker in control of such…
Published: 2025-04-11 · CVSS: 5.9 · CVSS 4.0
When using the ch-go library, under a specific condition when the query includes a large, uncompressed malicious external data, it is possible for an attacker in control of such data to smuggle another query packet into the connection stream.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7