Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-raceUpgrade go-toolsetUpgrade delveUpgrade golang-miscUpgrade golang-srcUpgrade opentelemetry-collectorUpgrade golang-docsUpgrade golangUpgrade golang-binUpgrade golang-tests | Jul 14, 2025 | Jun 11, 2025 |
| Alpine Linux | — | Upgrade go | Aug 8, 2025 | Jun 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade golang-docsUpgrade nerdctl-debuginfoUpgrade containerd-stressUpgrade golang-binUpgrade runcUpgrade nerdctlUpgrade runfinch-finchUpgrade dockerUpgrade soci-snapshotterUpgrade golangUpgrade golang-testsUpgrade amazon-ecr-credential-helper-debuginfoUpgrade golist-debuginfoUpgrade ecs-initUpgrade amazon-cloudwatch-agentUpgrade docker-debuginfoUpgrade golang-miscUpgrade containerd-debuginfoUpgrade containerdUpgrade golistUpgrade amazon-ecr-credential-helperUpgrade oci-add-hooks-debuginfoUpgrade oci-add-hooksUpgrade golang-sharedUpgrade golang-srcUpgrade amazon-ssm-agentUpgrade runc-debuginfo | Jun 25, 2025 | Jun 11, 2025 |
| Amazon_linux_2023 | — | Upgrade libcapUpgrade nerdctlUpgrade golang-testsUpgrade cni-plugins-debuginfoUpgrade docker-debuginfoUpgrade oci-add-hooks-debugsourceUpgrade containerd-stress-debuginfoUpgrade runfinch-finchUpgrade oci-add-hooksUpgrade runc-debugsourceUpgrade docker-debugsourceUpgrade captree-debuginfoUpgrade cni-pluginsUpgrade golang-miscUpgrade golang-srcUpgrade captreeUpgrade libcap-staticUpgrade golang-binUpgrade libcap-develUpgrade ecs-initUpgrade golangUpgrade amazon-ecr-credential-helperUpgrade golang-sharedUpgrade containerdUpgrade amazon-ssm-agentUpgrade containerd-stressUpgrade golang-docsUpgrade soci-snapshotterUpgrade runc-debuginfoUpgrade libcap-debuginfoUpgrade runcUpgrade amazon-cloudwatch-agentUpgrade containerd-debuginfoUpgrade dockerUpgrade oci-add-hooks-debuginfoUpgrade containerd-debugsourceUpgrade cni-plugins-debugsourceUpgrade libcap-debugsource | Jun 24, 2025 | Jun 11, 2025 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2025 |
| Debian | — | No solution existsUpgrade golang-1.24 | Jun 9, 2025 | Jun 9, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Dec 12, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade golang-testsUpgrade golang-raceUpgrade go-toolsetUpgrade golang-docsUpgrade delveUpgrade golang-srcUpgrade golang-binUpgrade golangUpgrade golang-misc | Jul 10, 2025 | Jun 11, 2025 |
| Redhat_linux | — | Upgrade delveUpgrade golang-binUpgrade golang-docsUpgrade go-toolsetUpgrade opentelemetry-collectorUpgrade golangNo solution existsUpgrade golang-testsUpgrade golang-raceUpgrade golang-miscUpgrade delve-debuginfoUpgrade delve-debugsourceUpgrade golang-src | Jul 9, 2025 | Jun 11, 2025 |
| Rocky_linux | — | Upgrade delve-debugsourceUpgrade opentelemetry-collectorUpgrade golang-binUpgrade delveUpgrade golang-raceUpgrade go-toolsetUpgrade delve-debuginfoUpgrade golang | Feb 5, 2026 | Oct 10, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.2.12 | Jul 30, 2026 | Jun 11, 2025 |
| Suse | — | Upgrade go1.24-openssl-docUpgrade go1.23-openssl-docUpgrade govulncheck-vulndbUpgrade go1.23-openssl-raceUpgrade go1.23-docUpgrade go1.24-docUpgrade go1.24-openssl-raceUpgrade go1.24Upgrade go1.24-opensslUpgrade go1.23-raceUpgrade go1.24-libstdUpgrade go1.23-opensslUpgrade go1.23Upgrade go1.24-race | Jun 10, 2025 | Jun 10, 2025 |
| Ubuntu | — | Upgrade golang-1.22-goUpgrade golang-1.22Upgrade golang-1.22-src | Jun 20, 2025 | Jun 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Jun 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub