vulnerability

Ubuntu: USN-7574-1 (CVE-2025-22870): Go vulnerabilities

Severity
3
CVSS
(AV:L/AC:L/Au:S/C:P/I:N/A:P)
Published
Mar 12, 2025
Added
Jun 20, 2025
Modified
Aug 18, 2025

Description

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Solutions

ubuntu-upgrade-golang-1-22ubuntu-upgrade-golang-1-22-goubuntu-upgrade-golang-1-22-src
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.