New comment by nilium on void-packages repository https://github.com/void-linux/void-packages/pull/23579#issuecomment-658589321 Comment: Possibly Caddy and any other program that uses the ReverseProxy handler or otherwise does what's described in the CVE (concurrently reads from the request body and writes to the response). The likelihood of programs encountering this is somewhat low since it's somewhat uncommon behavior that causes the data race.