CVE-2025-47907
Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.
- Published Aug 7, 2025
- CVSS 7.0 high
- 0.4% chance of exploitation in the next 30 days (EPSS)
- A fix is available