Race Condition The advisory has been revoked - it doesn't affect any version of package scanner-test-golang-vulnerability-unfixed  (opens in a new tab)


Threat Intelligence

EPSS
0.36% (28th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CHAINGUARDLATEST-SCANNERTESTGOLANGVULNERABILITYUNFIXED-14912549
  • published11 Jan 2026
  • disclosed7 Aug 2025

Introduced: 7 Aug 2025

CVE-2025-47907  (opens in a new tab)
CWE-362  (opens in a new tab)

Amendment

The Chainguard security team deemed this advisory irrelevant for Chainguard:latest.

NVD Description

Note: Versions mentioned in the description apply only to the upstream scanner-test-golang-vulnerability-unfixed package and not the scanner-test-golang-vulnerability-unfixed package as distributed by Chainguard.

Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.