Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golangUpgrade golang-srcUpgrade golang-miscUpgrade golang-binUpgrade golang-testsUpgrade opentelemetry-collectorUpgrade golang-docsUpgrade delveUpgrade golang-raceUpgrade go-toolset | Jul 14, 2025 | Jun 11, 2025 |
| Alpine Linux | — | Upgrade go | Aug 8, 2025 | Jun 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade dockerUpgrade golangUpgrade golang-testsUpgrade runfinch-finchUpgrade golang-binUpgrade soci-snapshotterUpgrade runcUpgrade amazon-ecr-credential-helper-debuginfoUpgrade nerdctl-debuginfoUpgrade golang-docsUpgrade nerdctlUpgrade containerd-stressUpgrade amazon-cloudwatch-agentUpgrade ecs-initUpgrade oci-add-hooks-debuginfoUpgrade runc-debuginfoUpgrade amazon-ssm-agentUpgrade golang-srcUpgrade containerd-debuginfoUpgrade containerdUpgrade golist-debuginfoUpgrade golistUpgrade golang-miscUpgrade docker-debuginfoUpgrade amazon-ecr-credential-helperUpgrade golang-sharedUpgrade oci-add-hooks | Jun 25, 2025 | Jun 11, 2025 |
| Amazon_linux_2023 | — | Upgrade oci-add-hooks-debuginfoUpgrade containerd-debugsourceUpgrade dockerUpgrade containerd-stressUpgrade amazon-ecr-credential-helperUpgrade containerdUpgrade runcUpgrade libcap-debuginfoUpgrade runc-debuginfoUpgrade amazon-ssm-agentUpgrade cni-plugins-debugsourceUpgrade amazon-cloudwatch-agentUpgrade libcap-debugsourceUpgrade containerd-debuginfoUpgrade golang-docsUpgrade golang-sharedUpgrade soci-snapshotterUpgrade cni-plugins-debuginfoUpgrade runfinch-finchUpgrade containerd-stress-debuginfoUpgrade golangUpgrade captree-debuginfoUpgrade oci-add-hooks-debugsourceUpgrade docker-debuginfoUpgrade golang-srcUpgrade cni-pluginsUpgrade golang-miscUpgrade ecs-initUpgrade runc-debugsourceUpgrade oci-add-hooksUpgrade docker-debugsourceUpgrade libcap-develUpgrade golang-binUpgrade captreeUpgrade libcapUpgrade golang-testsUpgrade nerdctlUpgrade libcap-static | Jun 24, 2025 | Jun 11, 2025 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2025 |
| Debian | — | No solution existsUpgrade golang-1.24 | Jun 9, 2025 | Jun 9, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Dec 12, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade golang-testsUpgrade golang-docsUpgrade go-toolsetUpgrade golang-raceUpgrade golang-miscUpgrade golang-srcUpgrade golang-binUpgrade delveUpgrade golang | Jul 10, 2025 | Jun 11, 2025 |
| Redhat_linux | — | No solution existsUpgrade delve-debugsourceUpgrade golang-raceUpgrade golang-miscUpgrade golang-srcUpgrade delve-debuginfoUpgrade golangUpgrade golang-testsUpgrade golang-binUpgrade opentelemetry-collectorUpgrade delveUpgrade golang-docsUpgrade go-toolset | Jul 9, 2025 | Jun 11, 2025 |
| Rocky_linux | — | Upgrade delve-debugsourceUpgrade golang-binUpgrade delveUpgrade opentelemetry-collectorUpgrade go-toolsetUpgrade golangUpgrade golang-raceUpgrade delve-debuginfo | Feb 5, 2026 | Oct 10, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 9.2.12Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.4.8 | Jul 30, 2026 | Jun 11, 2025 |
| Suse | — | Upgrade go1.24Upgrade go1.23Upgrade go1.23-opensslUpgrade go1.24-raceUpgrade go1.23-raceUpgrade go1.24-libstdUpgrade go1.24-openssl-raceUpgrade go1.24-opensslUpgrade govulncheck-vulndbUpgrade go1.23-docUpgrade go1.23-openssl-raceUpgrade go1.24-docUpgrade go1.24-openssl-docUpgrade go1.23-openssl-doc | Jun 10, 2025 | Jun 10, 2025 |
| Ubuntu | — | Upgrade golang-1.22Upgrade golang-1.22-srcUpgrade golang-1.22-go | Jun 20, 2025 | Jun 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Jun 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub