CVE Catalog
CVE-2025-47907
MediumSummary
A race condition in the Go database/sql package can overwrite expected results when a query is cancelled during the Scan method call while other queries run in parallel.
Risk Assessment
Organizations may face data inconsistency in applications using concurrent SQL queries, leading to incorrect results and potential data integrity issues.
Recommendation
Update the Go standard library to a patched version. Avoid cancelling the context while calling Scan on shared result rows.
Original NVD description (English source)
Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with