Fluid Attacks Database

Description

url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
go	stdlib	>=0 <1.25.8	1.25.8
debian 14	golang-1.25	=1.25.0-1 \|\| =1.25.0-2 \|\| =1.25.1-1 \|\| =1.25.2-1 \|\| =1.25.3-1 \|\| =1.25.6-1 \|\| =1.25.7-1 \|\| =1.25.7-2 \|\| >=0 <1.25.8-1	1.25.8-1
debian 14	golang-1.26	=1.26.0-1 \|\| =1.26~rc2-1 \|\| =1.26~rc3-1 \|\| =1.26~rc3-2 \|\| >=0 <1.26.1-1	1.26.1-1
rpm rhel10	delve	<0:1.25.2-3.el10_1	0:1.25.2-3.el10_1
rpm rhel9	gvisor-tap-vsock	-	-
rpm rhel9	bootc-image-builder	-	-
rpm rhel10.0	grafana-pcp	<0:5.2.2-5.el10_0	0:5.2.2-5.el10_0
rpm rhel10.0	git-lfs	<0:3.6.1-2.el10_0.3	0:3.6.1-2.el10_0.3
rpm rhel10	bootc-image-builder	-	-
rpm rhel9	containernetworking-plugins	<1:1.9.0-3.el9_8	1:1.9.0-3.el9_8

1-10 of 115

Aliases

References

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.