Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-goalpine-linux-upgrade-rclone | Aug 8, 2025 | Mar 12, 2025 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-golangamazon-linux-ami-2-upgrade-golang-binamazon-linux-ami-2-upgrade-golang-docsamazon-linux-ami-2-upgrade-golang-miscamazon-linux-ami-2-upgrade-golang-sharedamazon-linux-ami-2-upgrade-golang-srcamazon-linux-ami-2-upgrade-golang-tests | Mar 26, 2025 | Mar 12, 2025 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-golangamazon-linux-2023-upgrade-golang-binamazon-linux-2023-upgrade-golang-docsamazon-linux-2023-upgrade-golang-miscamazon-linux-2023-upgrade-golang-sharedamazon-linux-2023-upgrade-golang-srcamazon-linux-2023-upgrade-golang-tests | Apr 2, 2025 | Mar 12, 2025 | |
| Debian | debian-upgrade-golang-1-24no-fix-debian-deb-package | May 15, 2025 | Mar 12, 2025 | |
| Freebsd | freebsd-upgrade-package-gitea | Apr 2, 2025 | Mar 31, 2025 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Mar 12, 2025 | |
| Suse | — | suse-upgrade-amazon-ssm-agentsuse-upgrade-apptainersuse-upgrade-apptainer-leapsuse-upgrade-apptainer-sle15_5suse-upgrade-apptainer-sle15_6suse-upgrade-cosignsuse-upgrade-cosign-bash-completionsuse-upgrade-cosign-zsh-completionsuse-upgrade-firewalld-prometheus-configsuse-upgrade-go1-23suse-upgrade-go1-23-docsuse-upgrade-go1-23-opensslsuse-upgrade-go1-23-openssl-docsuse-upgrade-go1-23-openssl-racesuse-upgrade-go1-23-racesuse-upgrade-go1-24suse-upgrade-go1-24-docsuse-upgrade-go1-24-libstdsuse-upgrade-go1-24-opensslsuse-upgrade-go1-24-openssl-racesuse-upgrade-go1-24-racesuse-upgrade-golang-github-prometheus-alertmanagersuse-upgrade-golang-github-prometheus-node_exportersuse-upgrade-golang-github-prometheus-prometheussuse-upgrade-govulncheck-vulndbsuse-upgrade-grafanasuse-upgrade-helmsuse-upgrade-helm-bash-completionsuse-upgrade-helm-fish-completionsuse-upgrade-helm-zsh-completionsuse-upgrade-ignitionsuse-upgrade-ignition-dracut-grub2suse-upgrade-prometheus-blackbox_exportersuse-upgrade-rclonesuse-upgrade-rclone-bash-completionsuse-upgrade-rclone-zsh-completionsuse-upgrade-skopeosuse-upgrade-skopeo-bash-completionsuse-upgrade-skopeo-fish-completionsuse-upgrade-skopeo-zsh-completionsuse-upgrade-warewulf4suse-upgrade-warewulf4-dracutsuse-upgrade-warewulf4-mansuse-upgrade-warewulf4-overlaysuse-upgrade-warewulf4-overlay-slurmsuse-upgrade-warewulf4-reference-doc | Mar 10, 2025 | Mar 6, 2025 |
| Ubuntu | ubuntu-upgrade-golang-1-22ubuntu-upgrade-golang-1-22-goubuntu-upgrade-golang-1-22-src | Jun 20, 2025 | Mar 12, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub