CVE-2019-16276: Debian Linux

High severity, CVSS 7.5. EPSS: 5.3% chance of exploitation in the next 30 days.

Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.

Affected products

• Debian Debian Linux: version 9.0 only
• Fedoraproject Fedora: version 29 only; version 30 only; version 31 only
• Golang Go: before 1.12.10 (fixed in 1.12.10); from 1.13, before 1.13.1 (fixed in 1.13.1)
• Netapp Cloud Insights Telegraf Agent: affected versions not specified
• Opensuse Leap: version 15.0 only; version 15.1 only
• Red Hat Developer Tools: version 1.0 only
• Red Hat Enterprise Linux: version 8.0 only
• Red Hat Enterprise Linux Eus: version 8.1 only
• Red Hat Openshift Container Platform: version 4.2 only

Published 2019-09-30. Last modified 2026-06-17.