CVE-2022-25891: Containrrr Shoutrrr

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

The package github.com/containrrr/shoutrrr/pkg/util before 0.6.0 are vulnerable to Denial of Service (DoS) via the util.PartitionMessage function. Exploiting this vulnerability is possible by sending exactly 2000, 4000, or 6000 characters messages.

Affected products

• Containrrr Shoutrrr: before 0.6.0 (fixed in 0.6.0)

Published 2022-07-15. Last modified 2026-06-17.