{"id":"CVE-2022-25891","aliases":["GHSA-477v-w82m-634j","GO-2022-0528","SNYK-GOLANG-GITHUBCOMCONTAINRRRSHOUTRRRPKGUTIL-2849059"],"url":"https://o3.security/vulnerability/CVE-2022-25891","summary":"Denial of Service (DoS)","details":"The package github.com/containrrr/shoutrrr/pkg/util before 0.6.0 are vulnerable to Denial of Service (DoS) via the util.PartitionMessage function. Exploiting this vulnerability is possible by sending exactly 2000, 4000, or 6000 characters messages.","published":"2022-07-15T20:01:13.777Z","modified":"2026-07-15T01:49:00.680994992Z","cvss":{"score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P"},"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"Go","name":"github.com/containrrr/shoutrrr","fixedVersion":"0.6.0"}],"fix":{"url":"https://github.com/containrrr/shoutrrr/commit/6a27056f9d7522a8b493216195cb7634bf4b5c42","label":"containrrr/shoutrrr@6a27056"},"references":[{"type":"WEB","url":"https://github.com/containrrr/shoutrrr/releases/tag/v0.6.0"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/25xxx/CVE-2022-25891.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25891"},{"type":"ADVISORY","url":"https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMCONTAINRRRSHOUTRRRPKGUTIL-2849059"},{"type":"REPORT","url":"https://github.com/containrrr/shoutrrr/issues/240"},{"type":"FIX","url":"https://github.com/containrrr/shoutrrr/commit/6a27056f9d7522a8b493216195cb7634bf4b5c42"},{"type":"FIX","url":"https://github.com/containrrr/shoutrrr/pull/242"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-15T01:49:00.680994992Z"}}