{"id":"GO-2021-0141","details":"A Go HTTP server which reads from the request body while\nsimultaneously writing a response can panic when clients\nsend a \"Expect: 100-continue\" header.\n","modified":"2022-05-23T18:04:20Z","published":"2022-01-04T18:16:23Z","withdrawn":"2024-05-15T05:37:11.022276Z","references":[{"type":"FIX","url":"https://go.dev/cl/242598"},{"type":"FIX","url":"https://go.googlesource.com/go/+/fa98f46741f818913a8c11b877520a548715131f"},{"type":"WEB","url":"https://go.dev/issue/34902"},{"type":"WEB","url":"https://groups.google.com/g/golang-announce/c/XZNfaiwgt2w/m/E6gHDs32AQAJ"}],"affected":[{"package":{"name":"net/http","ecosystem":"Go","purl":"pkg:golang/net/http"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.13.13"},{"introduced":"1.14.0"},{"fixed":"1.14.5"}]}],"ecosystem_specific":{"symbols":["expectContinueReader.Read"]},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2021-0141.json","url":"https://pkg.go.dev/vuln/GO-2021-0141"}}],"schema_version":"1.7.3"}