AIKIDO-2025-10282
github.com/openziti/sdk-golang is vulnerable to Race Condition
20
Low Risk
This Affects:
github.com/openziti/sdk-golangTL;DR
Affected versions of this package have a vulnerability that can lead to a runtime panic due to unsafe concurrent access to the SupportedProtocols map in the Ziti Go SDK. When multiple goroutines call getEdgeRouterConn() simultaneously, it may cause a fatal runtime error. An attacker could exploit this by sending numerous concurrent requests, resulting in a denial of service (DoS) by crashing the application.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
github.com/openziti/sdk-golang is vulnerable to Race Condition in versions 0.11.6 - 1.0.1.
How to fix this
Upgrade the github.com/openziti/sdk-golang library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant