Fluid Attacks Database

Description

url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
go	stdlib	>=0 <1.25.8	1.25.8
debian 14	golang-1.25	=1.25.0-1 \|\| =1.25.0-2 \|\| =1.25.1-1 \|\| =1.25.2-1 \|\| =1.25.3-1 \|\| =1.25.6-1 \|\| =1.25.7-1 \|\| =1.25.7-2 \|\| >=0 <1.25.8-1	1.25.8-1
debian 14	golang-1.26	=1.26.0-1 \|\| =1.26~rc2-1 \|\| =1.26~rc3-1 \|\| =1.26~rc3-2 \|\| >=0 <1.26.1-1	1.26.1-1
rpm rhel10	git-lfs	<0:3.6.1-8.el10_1 \|\| >=0:3.7.1, <0:3.7.1-4.el10_2	0:3.7.1-4.el10_2
rpm rhel9	git-lfs	<0:3.6.1-8.el9_7 \|\| >=0:3.7.1, <0:3.7.1-4.el9_8	0:3.7.1-4.el9_8
rpm rhel9	grafana-pcp	<0:5.1.1-14.el9_8	0:5.1.1-14.el9_8
rpm rhel9	ignition	-	-
rpm rhel9	podman	-	-
rpm rhel9	rhc	<1:0.2.7-5.el9_8	1:0.2.7-5.el9_8
rpm rhel9	runc	-	-

1-10 of 110

Aliases

References

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.