CVE-2019-16276

CVE-2019-16276 describes an HTTP Request Smuggling vulnerability affecting Go versions prior to 1.12.10 and 1.13.x prior to 1.13.1, impacting various distributions including Debian, Fedora, and Red Hat. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low attack complexity, potentially leading to high integrity impacts such as data manipulation or unauthorized access. While it has a moderate EPSS score, indicating some exploitability, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.