Detections
Analytics

Echo: golang-1.24: security update to 1.24.6

high Tenable Cloud Security Plugin ID 462545

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to
 the Scan method of the returned Rows can result in unexpected results if other queries are being made in
 parallel. This can result in a race condition that may overwrite the expected results with those of
 another query, causing the call to Scan to return either unexpected results from the other query or an
 error. (CVE-2025-47907)

Solution

Update the golang-1.24 library and its related packages to version 1.24.6 or later.

See Also

https://advisory.echohq.com/cve/CVE-2025-47907

Plugin Details

Severity: High

ID: 462545

Version: Revision 1.2

Type: Local

Published: 10/2/2026

Updated: 10/5/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3.9

Percentile: 52.77

CVSS v3

Risk Factor: High

Base Score: 7

Temporal Score: 6.1

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS Score Source: CVE-2025-47907

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 9/15/2025

Vulnerability Publication Date: 9/15/2025

Reference Information

CVE: CVE-2025-47907