CVE-2021-36221

Name of the Vulnerable Software and Affected Versions Go versions 1.15.x through 1.15.14 Go versions 1.16.x through 1.16.6

Description The issue is related to a race condition that can cause a net/http/httputil ReverseProxy panic when an ErrAbortHandler abort occurs. This happens when there is a problem copying a proxied response body, leading to a panic in the ReverseProxy.

Recommendations For Go versions 1.15.x through 1.15.14, update to version 1.15.15 or later to resolve the issue. For Go versions 1.16.x through 1.16.6, update to version 1.16.7 or later to resolve the issue.