Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http. This could permit query parameter smuggling when a Go proxy forwards a parameter with an unparsable value. After fix, ReverseProxy sanitizes the query parameters in the forwarded query when the outbound request's Form field is set after the ReverseProxy. Director function returns, indicating that the proxy has parsed the query parameters. Proxies which do not parse query parameters continue to forward the original query parameters unchanged.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade buildahUpgrade criu-libsUpgrade containers-commonUpgrade golang-binUpgrade cockpit-podmanUpgrade golangUpgrade libslirp-develUpgrade netavarkUpgrade toolbox-testsUpgrade fuse-overlayfsUpgrade podman-remoteUpgrade podman-catatonitUpgrade golang-miscUpgrade buildah-testsUpgrade golang-testsUpgrade osbuild-composerUpgrade criuUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade go-toolsetUpgrade golang-srcUpgrade oci-seccomp-bpf-hookUpgrade osbuild-composer-coreUpgrade python3-criuUpgrade podman-gvproxyUpgrade osbuild-composer-dnf-jsonUpgrade podmanUpgrade criu-develUpgrade python3-podmanUpgrade osbuild-composer-workerUpgrade container-selinuxUpgrade podman-pluginsUpgrade skopeoUpgrade libslirpUpgrade conmonUpgrade podman-dockerUpgrade grafanaUpgrade runcUpgrade udicaUpgrade golang-docsUpgrade crunUpgrade delveUpgrade weldr-clientUpgrade golang-raceUpgrade git-lfsUpgrade slirp4netnsUpgrade skopeo-testsUpgrade toolboxUpgrade critUpgrade podman-tests | Jan 26, 2023 | Oct 14, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Oct 14, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade golang-binUpgrade golang-docsUpgrade golang-testsUpgrade golangUpgrade golang-miscUpgrade golang-sharedUpgrade golang-race | Apr 21, 2023 | Oct 14, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golangUpgrade golang-sharedUpgrade golang-srcUpgrade golang-miscUpgrade golang-raceUpgrade golang-binUpgrade golang-tests | Feb 17, 2025 | Oct 4, 2022 |
| Centos_linux | — | Upgrade buildahUpgrade conmonUpgrade golang-srcUpgrade netavarkUpgrade podman-pluginsUpgrade delve-debuginfoUpgrade slirp4netnsUpgrade weldr-client-tests-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade podman-testsUpgrade podman-catatonitUpgrade libslirpUpgrade fuse-overlayfs-debuginfoUpgrade osbuild-ostreeUpgrade toolboxUpgrade skopeo-debugsourceUpgrade toolbox-testsUpgrade osbuild-composer-dnf-jsonUpgrade conmon-debugsourceUpgrade golang-testsUpgrade osbuild-composer-coreUpgrade git-lfs-debugsourceUpgrade skopeoUpgrade buildah-debugsourceUpgrade criu-libsUpgrade fuse-overlayfsUpgrade podman-remote-debuginfoUpgrade buildah-tests-debuginfoUpgrade delve-debugsourceUpgrade golang-raceUpgrade weldr-client-debugsourceUpgrade golangUpgrade osbuild-composer-debuginfoUpgrade podman-catatonit-debuginfoUpgrade criu-debuginfoUpgrade buildah-debuginfoUpgrade osbuild-lvm2Upgrade cockpit-composerUpgrade containernetworking-plugins-debugsourceUpgrade criuUpgrade fuse-overlayfs-debugsourceUpgrade grafana-debuginfoUpgrade golang-miscUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade osbuild-composer-core-debuginfoUpgrade podmanUpgrade python3-podmanUpgrade grafanaUpgrade osbuild-selinuxUpgrade git-lfs-debuginfoUpgrade podman-remoteUpgrade podman-dockerUpgrade podman-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade osbuild-composer-tests-debuginfoUpgrade osbuild-composer-debugsourceUpgrade osbuildUpgrade aardvark-dnsUpgrade weldr-client-debuginfoUpgrade skopeo-testsUpgrade runcUpgrade python3-criuUpgrade toolbox-debugsourceUpgrade toolbox-debuginfoUpgrade skopeo-debuginfoUpgrade libslirp-debugsourceUpgrade criu-debugsourceUpgrade critUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-plugins-debuginfoUpgrade buildah-testsUpgrade delveUpgrade conmon-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade golang-docsUpgrade libslirp-debuginfoUpgrade slirp4netns-debuginfoUpgrade udicaUpgrade crun-debuginfoUpgrade criu-libs-debuginfoUpgrade criu-develUpgrade weldr-clientUpgrade osbuild-composerUpgrade golang-binUpgrade podman-gvproxyUpgrade osbuild-luks2Upgrade osbuild-composer-workerUpgrade crun-debugsourceUpgrade slirp4netns-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade runc-debugsourceUpgrade podman-debuginfoUpgrade libslirp-develUpgrade runc-debuginfoUpgrade python3-osbuildUpgrade grafana-debugsourceUpgrade cockpit-podmanUpgrade go-toolsetUpgrade containers-commonUpgrade git-lfs | Jan 24, 2023 | Oct 14, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Oct 14, 2022 |
| Freebsd | — | Upgrade go119Upgrade go118 | Nov 4, 2022 | Oct 4, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Feb 13, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jan 6, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Mar 9, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Dec 9, 2022 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jan 9, 2023 | Oct 14, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 8, 2024 |
| Oracle_linux | — | Upgrade udicaUpgrade delveUpgrade buildah-testsUpgrade golang-raceUpgrade golang-testsUpgrade crunUpgrade podman-gvproxyUpgrade python3-criuUpgrade criuUpgrade critUpgrade skopeo-testsUpgrade weldr-clientUpgrade podman-dockerUpgrade golang-docsUpgrade podman-testsUpgrade conmonUpgrade podman-pluginsUpgrade go-toolsetUpgrade container-selinuxUpgrade podman-catatonitUpgrade cockpit-podmanUpgrade osbuild-composer-workerUpgrade python3-podmanUpgrade osbuild-luks2Upgrade criu-develUpgrade runcUpgrade cockpit-composerUpgrade slirp4netnsUpgrade libslirpUpgrade osbuild-ostreeUpgrade golangUpgrade containers-commonUpgrade grafanaUpgrade osbuild-composerUpgrade netavarkUpgrade golang-srcUpgrade aardvark-dnsUpgrade skopeoUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade fuse-overlayfsUpgrade libslirp-develUpgrade python3-osbuildUpgrade git-lfsUpgrade osbuild-selinuxUpgrade osbuildUpgrade osbuild-lvm2Upgrade criu-libsUpgrade podmanUpgrade osbuild-composer-dnf-jsonUpgrade osbuild-composer-coreUpgrade oci-seccomp-bpf-hookUpgrade golang-miscUpgrade golang-binUpgrade buildah | Jan 24, 2023 | Oct 4, 2022 |
| Redhat Openshift | — | Upgrade buildahUpgrade skopeoUpgrade ignitionUpgrade podmanUpgrade openshift-clientsUpgrade conmon | Jan 18, 2023 | Oct 4, 2022 |
| Redhat_linux | — | Upgrade golang-binUpgrade podman-pluginsUpgrade crun-debugsourceUpgrade delve-debugsourceUpgrade containernetworking-pluginsUpgrade podman-debuginfoUpgrade podman-catatonitUpgrade libslirp-debuginfoUpgrade git-lfs-debuginfoUpgrade criuUpgrade criu-develUpgrade golang-testsUpgrade criu-debugsourceUpgrade cockpit-composerUpgrade delve-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade python3-osbuildUpgrade golangUpgrade osbuild-composer-worker-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-catatonit-debuginfoUpgrade critUpgrade runcUpgrade delveUpgrade osbuild-composerUpgrade runc-debuginfoUpgrade python3-criuUpgrade osbuild-lvm2Upgrade osbuild-composer-tests-debuginfoUpgrade buildah-tests-debuginfoUpgrade osbuild-composer-workerUpgrade toolbox-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade golang-docsUpgrade osbuild-composer-core-debuginfoUpgrade toolboxUpgrade aardvark-dnsUpgrade weldr-client-debuginfoUpgrade skopeo-testsUpgrade golang-miscUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade osbuild-composer-coreUpgrade libslirp-develUpgrade osbuildUpgrade criu-libsUpgrade skopeoUpgrade slirp4netns-debuginfoUpgrade criu-debuginfoUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade golang-srcUpgrade osbuild-selinuxUpgrade podman-gvproxy-debuginfoUpgrade podman-remote-debuginfoUpgrade podmanUpgrade runc-debugsourceUpgrade netavarkUpgrade podman-debugsourceUpgrade criu-libs-debuginfoUpgrade osbuild-ostreeUpgrade toolbox-debuginfoUpgrade podman-remoteUpgrade osbuild-composer-dnf-jsonUpgrade buildah-debuginfoUpgrade go-toolsetUpgrade git-lfsUpgrade weldr-client-debugsourceUpgrade libslirpUpgrade osbuild-composer-debuginfoUpgrade skopeo-debuginfoUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-testsUpgrade fuse-overlayfsUpgrade podman-plugins-debuginfoUpgrade grafana-debugsourceUpgrade conmon-debugsourceUpgrade python3-podmanUpgrade buildah-testsUpgrade buildahUpgrade conmonUpgrade osbuild-composer-debugsourceUpgrade weldr-clientUpgrade containernetworking-plugins-debugsourceUpgrade cockpit-podmanUpgrade git-lfs-debugsourceUpgrade grafana-debuginfoUpgrade grafanaUpgrade crunUpgrade container-selinuxUpgrade slirp4netnsUpgrade crun-debuginfoUpgrade podman-gvproxyUpgrade weldr-client-tests-debuginfoUpgrade udicaUpgrade skopeo-debugsourceUpgrade podman-dockerUpgrade osbuild-luks2Upgrade conmon-debuginfoNo solution existsUpgrade golang-raceUpgrade toolbox-tests | Jan 24, 2023 | Oct 14, 2022 |
| Rocky_linux | — | Upgrade podman-debugsourceUpgrade toolbox-testsUpgrade runcUpgrade conmon-debuginfoUpgrade crun-debugsourceUpgrade golang-binUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-debugsourceUpgrade buildah-testsUpgrade slirp4netns-debugsourceUpgrade aardvark-dnsUpgrade criu-develUpgrade libslirp-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podman-remoteUpgrade toolbox-debuginfoUpgrade runc-debuginfoUpgrade go-toolsetUpgrade toolbox-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-debuginfoUpgrade criu-libs-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade runc-debugsourceUpgrade containernetworking-pluginsUpgrade critUpgrade skopeo-testsUpgrade delveUpgrade podman-remote-debuginfoUpgrade slirp4netns-debuginfoUpgrade python3-criuUpgrade libslirp-debuginfoUpgrade conmon-debugsourceUpgrade skopeoUpgrade podmanUpgrade golang-raceUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-develUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade skopeo-debugsourceUpgrade criu-debuginfoUpgrade containers-commonUpgrade golangUpgrade criu-libsUpgrade fuse-overlayfsUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade netavarkUpgrade conmonUpgrade buildah-debugsourceUpgrade buildah-debuginfoUpgrade criuUpgrade toolboxUpgrade podman-testsUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debugsourceUpgrade buildah-tests-debuginfoUpgrade skopeo-debuginfoUpgrade libslirpUpgrade delve-debuginfoUpgrade crunUpgrade podman-catatonit-debuginfoUpgrade podman-catatonitUpgrade fuse-overlayfs-debuginfoUpgrade crun-debuginfoUpgrade buildahUpgrade delve-debugsource | Mar 12, 2024 | Oct 14, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 9.0.6 | Sep 30, 2025 | Oct 14, 2022 |
| Suse | — | Upgrade go1.18-openssl-raceUpgrade go1.19-raceUpgrade go1.18-raceUpgrade go1.18-openssl-docUpgrade go1.18-docUpgrade go1.18Upgrade go1.18-opensslUpgrade go1.19Upgrade go1.19-doc | Oct 26, 2022 | Oct 14, 2022 |
| Ubuntu | — | Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.18-goUpgrade golang-1.16-srcUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.18-srcUpgrade golang-1.16-goUpgrade golang-1.13Upgrade golang-1.13-goUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.13-go (Ubuntu Pro) | May 1, 2023 | Oct 14, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 14, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub