Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade goUpgrade rclone | Aug 8, 2025 | Mar 12, 2025 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade golangUpgrade golang-srcUpgrade golang-miscUpgrade golang-binUpgrade golang-sharedUpgrade golang-docs | Mar 26, 2025 | Mar 12, 2025 |
| Amazon_linux_2023 | — | Upgrade golangUpgrade golang-miscUpgrade golang-srcUpgrade golang-binUpgrade golang-docsUpgrade golang-sharedUpgrade golang-tests | Apr 2, 2025 | Mar 12, 2025 |
| Debian | — | Upgrade golang-1.24 | May 15, 2025 | Mar 12, 2025 |
| Freebsd | — | Upgrade gitea | Apr 2, 2025 | Mar 31, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 12, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.4.3Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 9.1.10Upgrade Splunk Enterprise to version 9.3.5Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 9.2.7 | Jul 30, 2026 | Mar 12, 2025 |
| Suse | — | Upgrade skopeo-fish-completionUpgrade go1.23-openssl-docUpgrade ignition-dracut-grub2Upgrade skopeoUpgrade rcloneUpgrade grafanaUpgrade ignitionUpgrade prometheus-blackbox_exporterUpgrade cosign-bash-completionUpgrade helm-zsh-completionUpgrade helmUpgrade go1.23-docUpgrade helm-bash-completionUpgrade go1.24-raceUpgrade warewulf4-overlayUpgrade go1.23-openssl-raceUpgrade go1.24-openssl-raceUpgrade golang-github-prometheus-alertmanagerUpgrade go1.23Upgrade rclone-zsh-completionUpgrade govulncheck-vulndbUpgrade warewulf4-dracutUpgrade warewulf4-manUpgrade golang-github-prometheus-prometheusUpgrade amazon-ssm-agentUpgrade go1.24Upgrade cosignUpgrade apptainer-sle15_5Upgrade apptainer-leapUpgrade warewulf4Upgrade helm-fish-completionUpgrade warewulf4-overlay-slurmUpgrade go1.23-opensslUpgrade go1.23-raceUpgrade go1.24-opensslUpgrade go1.24-docUpgrade skopeo-zsh-completionUpgrade skopeo-bash-completionUpgrade apptainerUpgrade apptainer-sle15_6Upgrade firewalld-prometheus-configUpgrade cosign-zsh-completionUpgrade warewulf4-reference-docUpgrade rclone-bash-completionUpgrade golang-github-prometheus-node_exporterUpgrade go1.24-libstd | Mar 10, 2025 | Mar 6, 2025 |
| Ubuntu | — | Upgrade golang-1.22Upgrade golang-1.22-srcUpgrade golang-1.22-go | Jun 20, 2025 | Mar 12, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub