Skip to content
Patch Next
Sign inAdd to your agent

← Public intelligence

Go package

github.com/jasonlovesdoggo/abacus

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

1 actionable advisory, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. High, CVSS 7.5GoPublished

    Goroutine Leak in Abacus SSE Implementation

    CVE-2025-27421 · GHSA-vh64-54px-qgf8

    Affected
    • Go github.com/jasonlovesdoggo/abacus < 0.0.0-20250302043802-898ff1204e11
    Fixed in
    0.0.0-20250302043802-898ff1204e11· Vendor fix available
    Issue
    Goroutine Leak in Abacus SSE Implementation Summary A critical goroutine leak vulnerability has been identified in the Abacus server's Server-Sent Events (SSE) implementation. The issue occurs when clients disconnect from the /stream endpoint, as the server fails to properly clean up resources and terminate associated goroutines. This leads to resource exhaustion where the server continues running but eventually stops accepting new SSE connections while maintaining high memory usage. The vulnerability specifically involves improper channel cleanup in the event handling mechanism, causing goroutines to remain blocked indefinitely. POC Impact This vulnerability affects all versions of Abacus prior to v1.4.0. The issue causes: - Permanent unresponsiveness of the /stream endpoint after prolonged use - Memory growth that stabilizes at a high level but prevents proper functionality - Selective denial of service affecting only SSE connections while other endpoints remain functional -…

    Recommended action: Upgrade to 0.0.0-20250302043802-898ff1204e11 (pre-release) or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:github.comSource checked Evidence →