
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2025-8689 is a security vulnerability affecting the golang packages in Red Hat Enterprise Linux 9.4. The vulnerability was discovered and disclosed on June 9, 2025, impacting the net/http component of the Go programming language compiler (Red Hat Advisory).
The vulnerability is related to request smuggling due to the acceptance of invalid chunked data in net/http. Red Hat has rated this update as having a security impact of Moderate (Red Hat Advisory).
The vulnerability affects multiple Red Hat Enterprise Linux platforms including x86_64, IBM z Systems, Power LE, and ARM 64 architectures running version 9.4 with Extended Update Support and Update Services for SAP Solutions (Red Hat Advisory).
Red Hat has released updated golang packages (version 1.21.13-9.el9_4) to address this vulnerability. Users are advised to apply these updates to their affected systems (Red Hat Advisory).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."