CVE-2021-33198: Golang Go

High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days.

In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method.

Affected products

• Golang Go: before 1.15.13 (fixed in 1.15.13); from 1.16.0, before 1.16.5 (fixed in 1.16.5)

Published 2021-08-02. Last modified 2026-06-17.