CVE-2025-47907

Incorrect results returned from Rows.Scan in database/sql

High · published August 7, 2025

CVSS v3.1
7.0
EPSS
0%
Percentile
31.1
In the wild
Unconfirmed
What it is

Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00383 · 31.1th percentile
Published
2025-08-07T15:25Z
EPSS history
Timeline
  • 07 AUG 15:25Z
    Incorrect results returned from Rows.Scan in database/sql
    cvelistv5