Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade goUpgrade rclone | Aug 8, 2025 | Mar 12, 2025 |
| Amazon Linux Ami 2 | — | Upgrade golang-sharedUpgrade golang-binUpgrade golang-docsUpgrade golang-srcUpgrade golang-testsUpgrade golang-miscUpgrade golang | Mar 26, 2025 | Mar 12, 2025 |
| Amazon_linux_2023 | — | Upgrade golangUpgrade golang-srcUpgrade golang-binUpgrade golang-miscUpgrade golang-testsUpgrade golang-docsUpgrade golang-shared | Apr 2, 2025 | Mar 12, 2025 |
| Debian | — | Upgrade golang-1.24 | May 15, 2025 | Mar 12, 2025 |
| Freebsd | — | Upgrade gitea | Apr 2, 2025 | Mar 31, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 12, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.4.3Upgrade Splunk Enterprise to version 9.1.10Upgrade Splunk Enterprise to version 9.2.7Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 9.3.5 | Jul 30, 2026 | Mar 12, 2025 |
| Suse | — | Upgrade skopeo-zsh-completionUpgrade go1.24-docUpgrade rclone-bash-completionUpgrade warewulf4-reference-docUpgrade cosign-zsh-completionUpgrade apptainerUpgrade apptainer-sle15_6Upgrade firewalld-prometheus-configUpgrade skopeo-bash-completionUpgrade go1.23-raceUpgrade helm-fish-completionUpgrade warewulf4-manUpgrade go1.24Upgrade warewulf4-overlay-slurmUpgrade golang-github-prometheus-prometheusUpgrade amazon-ssm-agentUpgrade go1.24-libstdUpgrade go1.24-opensslUpgrade go1.23-opensslUpgrade golang-github-prometheus-node_exporterUpgrade warewulf4Upgrade apptainer-leapUpgrade apptainer-sle15_5Upgrade cosignUpgrade warewulf4-overlayUpgrade go1.23-docUpgrade go1.23-openssl-raceUpgrade warewulf4-dracutUpgrade rclone-zsh-completionUpgrade skopeo-fish-completionUpgrade helm-zsh-completionUpgrade govulncheck-vulndbUpgrade go1.23Upgrade go1.24-openssl-raceUpgrade go1.24-raceUpgrade helm-bash-completionUpgrade go1.23-openssl-docUpgrade skopeoUpgrade rcloneUpgrade ignitionUpgrade prometheus-blackbox_exporterUpgrade cosign-bash-completionUpgrade grafanaUpgrade helmUpgrade ignition-dracut-grub2Upgrade golang-github-prometheus-alertmanager | Mar 10, 2025 | Mar 6, 2025 |
| Ubuntu | — | Upgrade golang-1.22-goUpgrade golang-1.22Upgrade golang-1.22-src | Jun 20, 2025 | Mar 12, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub