Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-raceUpgrade delveUpgrade go-toolsetUpgrade golang-binUpgrade golang-srcUpgrade opentelemetry-collectorUpgrade golang-docsUpgrade golang-testsUpgrade golang-miscUpgrade golang | Jul 14, 2025 | Jun 11, 2025 |
| Alpine Linux | — | Upgrade go | Aug 8, 2025 | Jun 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade dockerUpgrade golang-docsUpgrade soci-snapshotterUpgrade golang-testsUpgrade nerdctl-debuginfoUpgrade golang-binUpgrade nerdctlUpgrade golangUpgrade amazon-ecr-credential-helper-debuginfoUpgrade runfinch-finchUpgrade runcUpgrade containerd-stressUpgrade amazon-cloudwatch-agentUpgrade ecs-initUpgrade amazon-ecr-credential-helperUpgrade amazon-ssm-agentUpgrade oci-add-hooks-debuginfoUpgrade golang-srcUpgrade oci-add-hooksUpgrade golang-sharedUpgrade golist-debuginfoUpgrade containerd-debuginfoUpgrade containerdUpgrade golistUpgrade docker-debuginfoUpgrade golang-miscUpgrade runc-debuginfo | Jun 25, 2025 | Jun 11, 2025 |
| Amazon_linux_2023 | — | Upgrade libcap-debugsourceUpgrade amazon-cloudwatch-agentUpgrade runcUpgrade amazon-ecr-credential-helperUpgrade containerdUpgrade cni-plugins-debugsourceUpgrade containerd-debuginfoUpgrade soci-snapshotterUpgrade containerd-stressUpgrade golang-docsUpgrade golang-sharedUpgrade dockerUpgrade runc-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade libcap-debuginfoUpgrade containerd-debugsourceUpgrade amazon-ssm-agentUpgrade golang-binUpgrade libcap-develUpgrade golangUpgrade cni-pluginsUpgrade golang-miscUpgrade runfinch-finchUpgrade oci-add-hooksUpgrade docker-debugsourceUpgrade runc-debugsourceUpgrade captree-debuginfoUpgrade cni-plugins-debuginfoUpgrade golang-srcUpgrade ecs-initUpgrade libcap-staticUpgrade captreeUpgrade oci-add-hooks-debugsourceUpgrade docker-debuginfoUpgrade golang-testsUpgrade containerd-stress-debuginfoUpgrade nerdctlUpgrade libcap | Jun 24, 2025 | Jun 11, 2025 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2025 |
| Debian | — | No solution existsUpgrade golang-1.24 | Jun 9, 2025 | Jun 9, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Dec 12, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade golang-docsUpgrade golang-testsUpgrade golang-raceUpgrade go-toolsetUpgrade golang-miscUpgrade golang-srcUpgrade delveUpgrade golang-binUpgrade golang | Jul 10, 2025 | Jun 11, 2025 |
| Redhat_linux | — | Upgrade go-toolsetUpgrade golang-binUpgrade golang-docsUpgrade opentelemetry-collectorUpgrade delveUpgrade golang-testsUpgrade delve-debuginfoUpgrade golang-miscUpgrade golang-raceUpgrade golang-srcNo solution existsUpgrade delve-debugsourceUpgrade golang | Jul 9, 2025 | Jun 11, 2025 |
| Rocky_linux | — | Upgrade delve-debugsourceUpgrade golang-binUpgrade delveUpgrade opentelemetry-collectorUpgrade delve-debuginfoUpgrade golangUpgrade golang-raceUpgrade go-toolset | Feb 5, 2026 | Oct 10, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.2.12Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 9.3.9 | Jul 30, 2026 | Jun 11, 2025 |
| Suse | — | Upgrade go1.24-opensslUpgrade go1.24-openssl-raceUpgrade go1.24-libstdUpgrade go1.24Upgrade go1.23-raceUpgrade go1.24-raceUpgrade go1.23Upgrade go1.23-opensslUpgrade go1.23-docUpgrade govulncheck-vulndbUpgrade go1.24-docUpgrade go1.24-openssl-docUpgrade go1.23-openssl-docUpgrade go1.23-openssl-race | Jun 10, 2025 | Jun 10, 2025 |
| Ubuntu | — | Upgrade golang-1.22-srcUpgrade golang-1.22Upgrade golang-1.22-go | Jun 20, 2025 | Jun 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Jun 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub