Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade goUpgrade rclone | Aug 8, 2025 | Mar 12, 2025 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade golang-srcUpgrade golangUpgrade golang-miscUpgrade golang-binUpgrade golang-docsUpgrade golang-shared | Mar 26, 2025 | Mar 12, 2025 |
| Amazon_linux_2023 | — | Upgrade golang-testsUpgrade golang-sharedUpgrade golang-docsUpgrade golang-srcUpgrade golang-binUpgrade golangUpgrade golang-misc | Apr 2, 2025 | Mar 12, 2025 |
| Debian | — | Upgrade golang-1.24 | May 15, 2025 | Mar 12, 2025 |
| Freebsd | — | Upgrade gitea | Apr 2, 2025 | Mar 31, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 12, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 9.4.3Upgrade Splunk Enterprise to version 9.3.5Upgrade Splunk Enterprise to version 9.2.7Upgrade Splunk Enterprise to version 9.1.10Upgrade Splunk Enterprise to version 9.3.10 | Jul 30, 2026 | Mar 12, 2025 |
| Suse | — | Upgrade apptainer-leapUpgrade cosignUpgrade warewulf4Upgrade go1.23-opensslUpgrade go1.24-opensslUpgrade golang-github-prometheus-node_exporterUpgrade go1.24Upgrade warewulf4-overlay-slurmUpgrade firewalld-prometheus-configUpgrade warewulf4-manUpgrade go1.23-raceUpgrade helm-fish-completionUpgrade apptainer-sle15_5Upgrade skopeo-zsh-completionUpgrade apptainerUpgrade go1.24-docUpgrade skopeo-bash-completionUpgrade amazon-ssm-agentUpgrade golang-github-prometheus-prometheusUpgrade warewulf4-reference-docUpgrade go1.24-libstdUpgrade rclone-bash-completionUpgrade apptainer-sle15_6Upgrade cosign-zsh-completionUpgrade warewulf4-overlayUpgrade ignitionUpgrade skopeoUpgrade helm-zsh-completionUpgrade govulncheck-vulndbUpgrade go1.23Upgrade cosign-bash-completionUpgrade helmUpgrade skopeo-fish-completionUpgrade go1.24-raceUpgrade prometheus-blackbox_exporterUpgrade warewulf4-dracutUpgrade rclone-zsh-completionUpgrade golang-github-prometheus-alertmanagerUpgrade go1.24-openssl-raceUpgrade go1.23-openssl-raceUpgrade go1.23-docUpgrade helm-bash-completionUpgrade go1.23-openssl-docUpgrade rcloneUpgrade ignition-dracut-grub2Upgrade grafana | Mar 10, 2025 | Mar 6, 2025 |
| Ubuntu | — | Upgrade golang-1.22-goUpgrade golang-1.22-srcUpgrade golang-1.22 | Jun 20, 2025 | Mar 12, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub