url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade grafana-pcpUpgrade osbuild-composerUpgrade libslirp-develUpgrade image-builderUpgrade criuUpgrade grafana-selinuxUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hookUpgrade runcUpgrade criu-develUpgrade golang-srcUpgrade crunUpgrade delveUpgrade podman-pluginsUpgrade podman-remoteUpgrade golang-testsUpgrade skopeo-testsUpgrade osbuild-composer-coreUpgrade toolboxUpgrade netavarkUpgrade skopeoUpgrade golang-raceUpgrade containers-commonUpgrade golang-docsUpgrade critUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade podmanUpgrade golang-binUpgrade criu-libsUpgrade python3-podmanUpgrade podman-dockerUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade go-srpm-macrosUpgrade go-rpm-macrosUpgrade slirp4netnsUpgrade go-filesystemUpgrade python3-criuUpgrade opentelemetry-collectorUpgrade golang-miscUpgrade toolbox-testsUpgrade podman-testsUpgrade conmonUpgrade buildahUpgrade golangUpgrade aardvark-dnsUpgrade git-lfsUpgrade grafanaUpgrade buildah-testsUpgrade container-selinuxUpgrade osbuild-composer-workerUpgrade go-rpm-templatesUpgrade libslirpUpgrade udicaUpgrade go-toolset | Mar 31, 2026 | Mar 26, 2026 |
| Alpine Linux | — | Upgrade rcloneUpgrade go | Mar 9, 2026 | Mar 6, 2026 |
| Amazon Linux Ami 2 | — | Upgrade golang-docsUpgrade golang-testsUpgrade containerd-stressUpgrade nerdctl-debuginfoUpgrade runc-debuginfoUpgrade amazon-ecr-credential-helperUpgrade soci-snapshotterUpgrade golang-binUpgrade oci-add-hooks-debuginfoUpgrade golistUpgrade golist-debuginfoUpgrade containerdUpgrade amazon-cloudwatch-agentUpgrade dockerUpgrade oci-add-hooksUpgrade containerd-debuginfoUpgrade golang-sharedUpgrade runcUpgrade ecs-initUpgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade nerdctlUpgrade runfinch-finchUpgrade amazon-ecr-credential-helper-debuginfoUpgrade docker-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade containerd-stress-debuginfoUpgrade yq-debuginfoUpgrade golang-miscUpgrade golang-srcUpgrade golistUpgrade golangUpgrade soci-snapshotterUpgrade oci-add-hooksUpgrade runc-debugsourceUpgrade oci-add-hooks-debugsourceUpgrade golang-testsUpgrade dockerUpgrade runfinch-finchUpgrade docker-debuginfoUpgrade containerd-debugsourceUpgrade golist-debuginfoUpgrade amazon-cloudwatch-agentUpgrade credentials-fetcherUpgrade containerd-stressUpgrade golang-docsUpgrade docker-debugsourceUpgrade containerd-debuginfoUpgrade amazon-ecr-credential-helperUpgrade runcUpgrade golang-sharedUpgrade golist-debugsourceUpgrade golang-binUpgrade yq-debugsourceUpgrade oci-add-hooks-debuginfoUpgrade ecs-initUpgrade containerdUpgrade yqUpgrade runc-debuginfoUpgrade nerdctl | Mar 27, 2026 | Mar 6, 2026 |
| Oracle_linux | — | Upgrade golang-srcUpgrade go-srpm-macrosUpgrade osbuild-composerUpgrade osbuild-composer-coreUpgrade golang-miscUpgrade grafana-selinuxUpgrade golangUpgrade golang-testsUpgrade golang-binUpgrade go-rpm-templatesUpgrade golang-raceUpgrade git-lfsUpgrade yggdrasilUpgrade ipp-usbUpgrade go-toolsetUpgrade go-rpm-macrosUpgrade yggdrasil-worker-package-managerUpgrade yggdrasil-develUpgrade osbuild-composer-workerUpgrade grafanaUpgrade golang-docsUpgrade go-filesystemUpgrade image-builderUpgrade delveUpgrade grafana-pcp | Mar 27, 2026 | Mar 6, 2026 |
| Redhat Openshift | — | Upgrade ose-gcp-gcr-image-credential-providerUpgrade cri-oUpgrade runcUpgrade ose-aws-ecr-image-credential-providerUpgrade cri-toolsUpgrade ose-azure-acr-image-credential-providerUpgrade skopeoUpgrade openshiftUpgrade podmanUpgrade openshift-clientsUpgrade containernetworking-plugins | Aug 10, 2026 | Mar 6, 2026 |
| Redhat_linux | — | Upgrade osbuild-composer-core-debuginfoUpgrade python3.12-django-ansible-base+channel_authUpgrade ipp-usb-debuginfoUpgrade python3.12-jwcryptoUpgrade runc-debugsourceUpgrade git-lfs-debuginfoUpgrade ipp-usbUpgrade cockpit-podmanUpgrade python3.12-pyjwtUpgrade python3.12-django-ansible-base+rbacUpgrade python3.12-pytokensUpgrade rhc-debugsourceUpgrade conmon-debuginfoUpgrade podman-plugins-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade osbuild-composer-dnf-jsonUpgrade osbuild-composer-coreUpgrade podman-gvproxyUpgrade python3.12-django-ansible-baseUpgrade gvisor-tap-vsock-gvforwarderUpgrade automation-gateway-proxy-server-debuginfoUpgrade flightctl-agentUpgrade yggdrasilUpgrade grafana-debugsourceUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade automation-gateway-proxy-debugsourceUpgrade golang-srcUpgrade python3.12-django-ansible-base+api_documentationUpgrade python3.12-pytokens-debugsourceUpgrade python3.12-django-ansible-base+redis_clientUpgrade go-rpm-macrosUpgrade python3.12-django-ansible-base+jwt_consumerUpgrade python3.12-cffi-debuginfoUpgrade python3.12-pysequoia-debuginfoUpgrade automation-controller-serverUpgrade automation-eda-controller-base-servicesUpgrade conmonUpgrade criu-develUpgrade crunUpgrade receptor-debuginfoUpgrade rhc-develUpgrade containernetworking-plugins-debuginfoUpgrade python3.12-django-ansible-base+authenticationUpgrade go-toolsetUpgrade yamllintUpgrade delveUpgrade automation-gateway-configUpgrade python3.12-django-ansible-base+resource_registryUpgrade crun-debuginfoUpgrade python3-pytokensUpgrade python3.12-pulp-containerUpgrade git-lfsUpgrade ansible-lintUpgrade crun-debugsourceUpgrade go-rpm-macros-debuginfoUpgrade grafanaUpgrade libslirp-debugsourceUpgrade automation-gateway-proxy-serverUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade rhc-worker-playbookUpgrade automation-platform-uiUpgrade podman-remote-debuginfoUpgrade grafana-pcpUpgrade containers-commonUpgrade libslirpUpgrade automation-eda-controllerUpgrade receptor-debugsourceUpgrade automation-eda-controller-event-stream-servicesUpgrade go-filesystemUpgrade osbuild-composer-tests-debuginfoUpgrade rhcUpgrade runc-debuginfoUpgrade delve-debuginfoUpgrade criu-libsUpgrade automation-controller-venv-towerUpgrade container-selinuxUpgrade yggdrasil-worker-package-manager-debuginfoUpgrade toolbox-debuginfoUpgrade opentelemetry-collectorUpgrade podman-debugsourceUpgrade buildah-tests-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade rhc-debuginfoUpgrade osbuild-composer-debuginfoUpgrade python3-criuUpgrade python3.12-cryptography-debugsourceUpgrade flightctl-observabilityUpgrade slirp4netns-debugsourceUpgrade python3.12-markdownUpgrade python3.12-pyasn1Upgrade python3.12-cryptographyUpgrade podman-pluginsUpgrade python3.12-pysequoia-debugsourceUpgrade automation-controllerUpgrade flightctl-cliUpgrade libslirp-develUpgrade git-lfs-debugsourceUpgrade yggdrasil-worker-package-managerUpgrade oci-seccomp-bpf-hookUpgrade python3.12-django-ansible-base+rest_filtersUpgrade osbuild-composer-workerUpgrade python3.12-django-ansible-base+feature_flagsUpgrade slirp4netns-debuginfoUpgrade skopeo-debuginfoUpgrade slirp4netnsUpgrade image-builder-debugsourceUpgrade yggdrasil-worker-package-manager-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade criu-debugsourceUpgrade toolboxUpgrade python3.12-pyOpenSSLUpgrade python3.12-blackUpgrade podman-debuginfoUpgrade python3.12-pulpcoreUpgrade fuse-overlayfs-debuginfoUpgrade criu-debuginfoUpgrade podman-testsUpgrade buildahUpgrade go-srpm-macrosUpgrade ansible-testUpgrade automation-gatewayUpgrade receptorUpgrade podman-remoteUpgrade criu-libs-debuginfoUpgrade rhc-worker-scriptUpgrade osbuild-composer-debugsourceUpgrade podman-dockerUpgrade golangUpgrade delve-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade yggdrasil-examples-debuginfoUpgrade python3.12-pyjwt+cryptoUpgrade python3.12-cryptography-debuginfoUpgrade yggdrasil-develUpgrade skopeo-debugsourceUpgrade python3.12-galaxy-importerUpgrade python3-pathspecUpgrade podman-catatonit-debuginfoUpgrade libslirp-debuginfoUpgrade criuUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade grafana-debuginfoUpgrade go-rpm-macros-debugsourceUpgrade podman-catatonitUpgrade podmanUpgrade fuse-overlayfsUpgrade critUpgrade buildah-debuginfoUpgrade ansible-coreUpgrade aardvark-dnsUpgrade automation-gateway-proxyUpgrade python3.12-django-ansible-base+activitystreamUpgrade automation-hubUpgrade automation-gateway-serverUpgrade automation-controller-cliUpgrade udicaUpgrade toolbox-debugsourceUpgrade python3.12-pathspecUpgrade yggdrasil-debugsourceUpgrade osbuild-composerUpgrade image-builder-debuginfoUpgrade automation-eda-controller-worker-servicesUpgrade golang-binUpgrade automation-eda-controller-baseUpgrade osbuild-composer-worker-debuginfoUpgrade gvisor-tap-vsock-debuginfoUpgrade gvisor-tap-vsockUpgrade runcUpgrade python3.12-django-ansible-base+oauth2_providerUpgrade gvisor-tap-vsock-debugsourceUpgrade python3.12-cffi-debugsourceUpgrade automation-controller-uiUpgrade python3.12-pytokens-debuginfoUpgrade python3.12-cffiUpgrade image-builderUpgrade golang-raceUpgrade rhc-worker-playbook-debuginfoUpgrade python3-pytokens-debuginfoUpgrade python3-podmanNo solution existsUpgrade buildah-testsUpgrade python3.12-dynaconfUpgrade netavarkUpgrade python-pytokens-debugsourceUpgrade golang-miscUpgrade python3.12-pyasn1-modulesUpgrade grafana-selinuxUpgrade python3.12-galaxy-ngUpgrade podman-tests-debuginfoUpgrade yggdrasil-debuginfoUpgrade conmon-debugsourceUpgrade receptorctlUpgrade flightctl-selinuxUpgrade skopeoUpgrade containernetworking-pluginsUpgrade grafana-pcp-debuginfoUpgrade toolbox-testsUpgrade rhc-worker-playbook-debugsourceUpgrade python3.12-pysequoiaUpgrade grafana-pcp-debugsourceUpgrade golang-docsUpgrade buildah-debugsourceUpgrade flightctl-servicesUpgrade python3-blackUpgrade python3-wheel-wheelUpgrade golang-testsUpgrade go-rpm-templates | Mar 27, 2026 | Mar 6, 2026 |
| Rocky_linux | — | Upgrade toolbox-debugsourceUpgrade criuUpgrade delve-debugsourceUpgrade podman-tests-debuginfoUpgrade image-builder-debugsourceUpgrade yggdrasil-worker-package-manager-debuginfoUpgrade criu-libs-debuginfoUpgrade crunUpgrade skopeoUpgrade git-lfs-debugsourceUpgrade podman-catatonit-debuginfoUpgrade podman-pluginsUpgrade buildah-debugsourceUpgrade osbuild-composer-debugsourceUpgrade skopeo-debugsourceUpgrade containers-commonUpgrade yggdrasil-worker-package-manager-debugsourceUpgrade buildah-tests-debuginfoUpgrade conmon-debugsourceUpgrade containernetworking-pluginsUpgrade ipp-usb-debuginfoUpgrade crun-debugsourceUpgrade conmonUpgrade grafana-pcp-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-develUpgrade yggdrasil-develUpgrade osbuild-composer-core-debuginfoUpgrade golang-binUpgrade image-builder-debuginfoUpgrade podman-remote-debuginfoUpgrade golang-raceUpgrade fuse-overlayfs-debuginfoUpgrade golangUpgrade osbuild-composer-coreUpgrade toolbox-testsUpgrade grafana-debuginfoUpgrade grafana-selinuxUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade criu-debuginfoUpgrade podmanUpgrade fuse-overlayfsUpgrade toolboxUpgrade image-builderUpgrade delveUpgrade go-rpm-macros-debuginfoUpgrade podman-catatonitUpgrade containernetworking-plugins-debugsourceUpgrade podman-debugsourceUpgrade criu-debugsourceUpgrade skopeo-testsUpgrade ipp-usbUpgrade go-rpm-macros-debugsourceUpgrade criu-libsUpgrade slirp4netns-debuginfoUpgrade slirp4netnsUpgrade podman-plugins-debuginfoUpgrade libslirp-develUpgrade delve-debuginfoUpgrade runc-debugsourceUpgrade osbuild-composer-workerUpgrade opentelemetry-collectorUpgrade git-lfs-debuginfoUpgrade critUpgrade slirp4netns-debugsourceUpgrade runcUpgrade podman-remoteUpgrade yggdrasil-debuginfoUpgrade toolbox-debuginfoUpgrade podman-testsUpgrade podman-debuginfoUpgrade grafana-pcpUpgrade yggdrasil-worker-package-managerUpgrade yggdrasilUpgrade podman-gvproxy-debuginfoUpgrade yggdrasil-debugsourceUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade grafana-pcp-debugsourceUpgrade libslirp-debuginfoUpgrade python3-criuUpgrade skopeo-debuginfoUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade git-lfsUpgrade conmon-debuginfoUpgrade go-filesystemUpgrade crun-debuginfoUpgrade osbuild-composerUpgrade buildahUpgrade aardvark-dnsUpgrade grafana-debugsourceUpgrade go-toolsetUpgrade podman-gvproxyUpgrade containernetworking-plugins-debuginfoUpgrade osbuild-composer-debuginfoUpgrade libslirpUpgrade go-rpm-macrosUpgrade fuse-overlayfs-debugsourceUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade grafanaUpgrade go-rpm-templatesUpgrade osbuild-composer-worker-debuginfoUpgrade libslirp-debugsource | Apr 8, 2026 | Apr 7, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.2.4Upgrade Splunk Enterprise to version 10.4.2Upgrade Splunk Enterprise to version 10.0.7Upgrade Splunk Enterprise to version 10.2.6Upgrade Splunk Enterprise to version 9.4.14Upgrade Splunk Enterprise to version 10.0.9Upgrade Splunk Enterprise to version 10.4.0Upgrade Splunk Enterprise to version 9.4.12Upgrade Splunk Enterprise to version 9.3.13 | Jul 30, 2026 | Mar 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Mar 6, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub