CVE-2026-25679 | BDVDB-2026-318939 Detail
Go standard librarynet/url
Description#
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact high. Attack vector: network.
Weaknesses#
- CWE-1286 Improper Validation of Syntactic Correctness of Input
References#
- https://go.dev/cl/752180
- https://go.dev/issue/77578
- https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk
- https://pkg.go.dev/vuln/GO-2026-4601
- https://access.redhat.com/security/cve/CVE-2026-25679
- https://bugzilla.redhat.com/show_bug.cgi?id=2445356
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25679.json
- https://access.redhat.com/errata/RHSA-2026:13508
- https://access.redhat.com/errata/RHSA-2026:41019
- https://access.redhat.com/errata/RHSA-2026:8855
- https://access.redhat.com/errata/RHSA-2026:54191
- https://access.redhat.com/errata/RHSA-2026:13512
- https://access.redhat.com/errata/RHSA-2026:54757
- https://access.redhat.com/errata/RHSA-2026:26527
- https://access.redhat.com/errata/RHSA-2026:59830
Show all 40
- https://access.redhat.com/errata/RHSA-2026:26541
- https://access.redhat.com/errata/RHSA-2026:65838
- https://access.redhat.com/errata/RHSA-2026:28886
- https://access.redhat.com/errata/RHSA-2026:56785
- https://access.redhat.com/errata/RHSA-2026:28961
- https://access.redhat.com/errata/RHSA-2026:56910
- https://access.redhat.com/errata/RHSA-2026:56852
- https://access.redhat.com/errata/RHSA-2026:25043
- https://access.redhat.com/errata/RHSA-2026:34097
- https://access.redhat.com/errata/RHSA-2026:60018
- https://access.redhat.com/errata/RHSA-2026:21655
- https://access.redhat.com/errata/RHSA-2026:57482
- https://access.redhat.com/errata/RHSA-2026:25180
- https://access.redhat.com/errata/RHSA-2026:27076
- https://access.redhat.com/errata/RHSA-2026:6341
- https://access.redhat.com/errata/RHSA-2026:36796
- https://access.redhat.com/errata/RHSA-2026:66401
- https://access.redhat.com/errata/RHSA-2026:28047
- https://access.redhat.com/errata/RHSA-2026:39810
- https://access.redhat.com/errata/RHSA-2026:42150
- https://access.redhat.com/errata/RHSA-2026:42151
- https://access.redhat.com/errata/RHSA-2026:34365
- https://access.redhat.com/errata/RHSA-2026:14868
- https://access.redhat.com/errata/RHSA-2026:8314
- https://access.redhat.com/errata/RHSA-2026:9435
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.