Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-testsUpgrade opentelemetry-collectorUpgrade golang-binUpgrade golang-srcUpgrade golang-docsUpgrade golangUpgrade golang-miscUpgrade go-toolsetUpgrade golang-raceUpgrade delve | Jul 14, 2025 | Jun 11, 2025 |
| Alpine Linux | — | Upgrade go | Aug 8, 2025 | Jun 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade runcUpgrade nerdctlUpgrade golang-binUpgrade golang-docsUpgrade containerd-stressUpgrade dockerUpgrade golangUpgrade soci-snapshotterUpgrade nerdctl-debuginfoUpgrade runfinch-finchUpgrade amazon-ecr-credential-helper-debuginfoUpgrade golang-testsUpgrade golang-miscUpgrade amazon-cloudwatch-agentUpgrade golistUpgrade docker-debuginfoUpgrade containerd-debuginfoUpgrade containerdUpgrade amazon-ecr-credential-helperUpgrade golist-debuginfoUpgrade ecs-initUpgrade oci-add-hooks-debuginfoUpgrade golang-sharedUpgrade oci-add-hooksUpgrade golang-srcUpgrade runc-debuginfoUpgrade amazon-ssm-agent | Jun 25, 2025 | Jun 11, 2025 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade containerd-stressUpgrade golang-docsUpgrade containerd-debugsourceUpgrade oci-add-hooks-debuginfoUpgrade dockerUpgrade soci-snapshotterUpgrade amazon-cloudwatch-agentUpgrade libcap-debugsourceUpgrade cni-plugins-debugsourceUpgrade amazon-ecr-credential-helperUpgrade containerdUpgrade runcUpgrade containerd-debuginfoUpgrade amazon-ssm-agentUpgrade libcap-debuginfoUpgrade runc-debuginfoUpgrade nerdctlUpgrade golang-srcUpgrade docker-debuginfoUpgrade containerd-stress-debuginfoUpgrade libcapUpgrade runc-debugsourceUpgrade oci-add-hooksUpgrade golang-testsUpgrade docker-debugsourceUpgrade ecs-initUpgrade captree-debuginfoUpgrade cni-plugins-debuginfoUpgrade runfinch-finchUpgrade libcap-staticUpgrade libcap-develUpgrade golang-binUpgrade captreeUpgrade cni-pluginsUpgrade golang-miscUpgrade golangUpgrade oci-add-hooks-debugsource | Jun 24, 2025 | Jun 11, 2025 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2025 |
| Debian | — | Upgrade golang-1.24No solution exists | Jun 9, 2025 | Jun 9, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Dec 12, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade golang-raceUpgrade golang-testsUpgrade golang-docsUpgrade go-toolsetUpgrade golangUpgrade golang-miscUpgrade golang-binUpgrade delveUpgrade golang-src | Jul 10, 2025 | Jun 11, 2025 |
| Redhat_linux | — | Upgrade delve-debuginfoUpgrade golang-srcNo solution existsUpgrade golang-raceUpgrade golangUpgrade golang-testsUpgrade delve-debugsourceUpgrade golang-miscUpgrade delveUpgrade golang-docsUpgrade opentelemetry-collectorUpgrade golang-binUpgrade go-toolset | Jul 9, 2025 | Jun 11, 2025 |
| Rocky_linux | — | Upgrade go-toolsetUpgrade delve-debuginfoUpgrade golangUpgrade golang-raceUpgrade delve-debugsourceUpgrade delveUpgrade golang-binUpgrade opentelemetry-collector | Feb 5, 2026 | Oct 10, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 9.2.12Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 9.3.9 | Jul 30, 2026 | Jun 11, 2025 |
| Suse | — | Upgrade go1.24Upgrade go1.24-opensslUpgrade go1.23-opensslUpgrade go1.24-openssl-raceUpgrade go1.24-libstdUpgrade go1.23Upgrade go1.23-raceUpgrade go1.24-raceUpgrade go1.23-openssl-raceUpgrade go1.23-docUpgrade govulncheck-vulndbUpgrade go1.24-openssl-docUpgrade go1.23-openssl-docUpgrade go1.24-doc | Jun 10, 2025 | Jun 10, 2025 |
| Ubuntu | — | Upgrade golang-1.22-srcUpgrade golang-1.22Upgrade golang-1.22-go | Jun 20, 2025 | Jun 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Jun 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub