Description
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
Published: 2026-03-06
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Unvalidated URL parsing
Action: Update
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References
Link Providers
https://access.redhat.com/errata/RHSA-2026:10065 cve-icon
https://access.redhat.com/errata/RHSA-2026:10125 cve-icon
https://access.redhat.com/errata/RHSA-2026:10133 cve-icon
https://access.redhat.com/errata/RHSA-2026:10140 cve-icon
https://access.redhat.com/errata/RHSA-2026:10141 cve-icon
https://access.redhat.com/errata/RHSA-2026:10158 cve-icon
https://access.redhat.com/errata/RHSA-2026:10169 cve-icon
https://access.redhat.com/errata/RHSA-2026:10175 cve-icon
https://access.redhat.com/errata/RHSA-2026:10184 cve-icon
https://access.redhat.com/errata/RHSA-2026:10225 cve-icon
https://access.redhat.com/errata/RHSA-2026:10250 cve-icon
https://access.redhat.com/errata/RHSA-2026:10701 cve-icon
https://access.redhat.com/errata/RHSA-2026:10712 cve-icon
https://access.redhat.com/errata/RHSA-2026:10929 cve-icon
https://access.redhat.com/errata/RHSA-2026:11217 cve-icon
https://access.redhat.com/errata/RHSA-2026:11375 cve-icon
https://access.redhat.com/errata/RHSA-2026:11412 cve-icon
https://access.redhat.com/errata/RHSA-2026:11413 cve-icon
https://access.redhat.com/errata/RHSA-2026:11686 cve-icon
https://access.redhat.com/errata/RHSA-2026:11688 cve-icon
https://access.redhat.com/errata/RHSA-2026:11747 cve-icon
https://access.redhat.com/errata/RHSA-2026:11749 cve-icon
https://access.redhat.com/errata/RHSA-2026:11768 cve-icon
https://access.redhat.com/errata/RHSA-2026:11800 cve-icon
https://access.redhat.com/errata/RHSA-2026:11856 cve-icon
https://access.redhat.com/errata/RHSA-2026:11916 cve-icon
https://access.redhat.com/errata/RHSA-2026:11996 cve-icon
https://access.redhat.com/errata/RHSA-2026:12028 cve-icon
https://access.redhat.com/errata/RHSA-2026:12029 cve-icon
https://access.redhat.com/errata/RHSA-2026:12030 cve-icon
https://access.redhat.com/errata/RHSA-2026:12031 cve-icon
https://access.redhat.com/errata/RHSA-2026:12032 cve-icon
https://access.redhat.com/errata/RHSA-2026:12033 cve-icon
https://access.redhat.com/errata/RHSA-2026:12282 cve-icon
https://access.redhat.com/errata/RHSA-2026:13508 cve-icon
https://access.redhat.com/errata/RHSA-2026:13512 cve-icon
https://access.redhat.com/errata/RHSA-2026:13545 cve-icon
https://access.redhat.com/errata/RHSA-2026:13642 cve-icon
https://access.redhat.com/errata/RHSA-2026:13643 cve-icon
https://access.redhat.com/errata/RHSA-2026:13671 cve-icon
https://access.redhat.com/errata/RHSA-2026:13791 cve-icon
https://access.redhat.com/errata/RHSA-2026:13829 cve-icon
https://access.redhat.com/errata/RHSA-2026:14020 cve-icon
https://access.redhat.com/errata/RHSA-2026:14100 cve-icon
https://access.redhat.com/errata/RHSA-2026:14774 cve-icon
https://access.redhat.com/errata/RHSA-2026:14868 cve-icon
https://access.redhat.com/errata/RHSA-2026:14879 cve-icon
https://access.redhat.com/errata/RHSA-2026:15091 cve-icon
https://access.redhat.com/errata/RHSA-2026:16102 cve-icon
https://access.redhat.com/errata/RHSA-2026:16696 cve-icon
https://access.redhat.com/errata/RHSA-2026:16874 cve-icon
https://access.redhat.com/errata/RHSA-2026:16875 cve-icon
https://access.redhat.com/errata/RHSA-2026:17040 cve-icon
https://access.redhat.com/errata/RHSA-2026:17084 cve-icon
https://access.redhat.com/errata/RHSA-2026:17287 cve-icon
https://access.redhat.com/errata/RHSA-2026:17598 cve-icon
https://access.redhat.com/errata/RHSA-2026:19017 cve-icon
https://access.redhat.com/errata/RHSA-2026:19022 cve-icon
https://access.redhat.com/errata/RHSA-2026:19026 cve-icon
https://access.redhat.com/errata/RHSA-2026:19027 cve-icon
https://access.redhat.com/errata/RHSA-2026:19031 cve-icon
https://access.redhat.com/errata/RHSA-2026:19032 cve-icon
https://access.redhat.com/errata/RHSA-2026:19049 cve-icon
https://access.redhat.com/errata/RHSA-2026:19055 cve-icon
https://access.redhat.com/errata/RHSA-2026:19126 cve-icon
https://access.redhat.com/errata/RHSA-2026:19128 cve-icon
https://access.redhat.com/errata/RHSA-2026:19132 cve-icon
https://access.redhat.com/errata/RHSA-2026:19133 cve-icon
https://access.redhat.com/errata/RHSA-2026:19135 cve-icon
https://access.redhat.com/errata/RHSA-2026:19181 cve-icon
https://access.redhat.com/errata/RHSA-2026:19184 cve-icon
https://access.redhat.com/errata/RHSA-2026:19185 cve-icon
https://access.redhat.com/errata/RHSA-2026:19207 cve-icon
https://access.redhat.com/errata/RHSA-2026:19350 cve-icon
https://access.redhat.com/errata/RHSA-2026:19353 cve-icon
https://access.redhat.com/errata/RHSA-2026:19375 cve-icon
https://access.redhat.com/errata/RHSA-2026:19475 cve-icon
https://access.redhat.com/errata/RHSA-2026:19634 cve-icon
https://access.redhat.com/errata/RHSA-2026:19719 cve-icon
https://access.redhat.com/errata/RHSA-2026:19720 cve-icon
https://access.redhat.com/errata/RHSA-2026:19721 cve-icon
https://access.redhat.com/errata/RHSA-2026:19750 cve-icon
https://access.redhat.com/errata/RHSA-2026:20041 cve-icon
https://access.redhat.com/errata/RHSA-2026:20088 cve-icon
https://access.redhat.com/errata/RHSA-2026:20581 cve-icon
https://access.redhat.com/errata/RHSA-2026:20582 cve-icon
https://access.redhat.com/errata/RHSA-2026:20584 cve-icon
https://access.redhat.com/errata/RHSA-2026:20889 cve-icon
https://access.redhat.com/errata/RHSA-2026:21017 cve-icon
https://access.redhat.com/errata/RHSA-2026:21655 cve-icon
https://access.redhat.com/errata/RHSA-2026:21657 cve-icon
https://access.redhat.com/errata/RHSA-2026:21691 cve-icon
https://access.redhat.com/errata/RHSA-2026:21696 cve-icon
https://access.redhat.com/errata/RHSA-2026:21769 cve-icon
https://access.redhat.com/errata/RHSA-2026:22347 cve-icon
https://access.redhat.com/errata/RHSA-2026:22423 cve-icon
https://access.redhat.com/errata/RHSA-2026:22450 cve-icon
https://access.redhat.com/errata/RHSA-2026:22627 cve-icon
https://access.redhat.com/errata/RHSA-2026:22714 cve-icon
https://access.redhat.com/errata/RHSA-2026:22733 cve-icon
https://access.redhat.com/errata/RHSA-2026:22862 cve-icon
https://access.redhat.com/errata/RHSA-2026:22937 cve-icon
https://access.redhat.com/errata/RHSA-2026:23228 cve-icon
https://access.redhat.com/errata/RHSA-2026:23345 cve-icon
https://access.redhat.com/errata/RHSA-2026:24386 cve-icon
https://access.redhat.com/errata/RHSA-2026:24853 cve-icon
https://access.redhat.com/errata/RHSA-2026:25043 cve-icon
https://access.redhat.com/errata/RHSA-2026:25127 cve-icon
https://access.redhat.com/errata/RHSA-2026:25180 cve-icon
https://access.redhat.com/errata/RHSA-2026:25248 cve-icon
https://access.redhat.com/errata/RHSA-2026:25250 cve-icon
https://access.redhat.com/errata/RHSA-2026:25251 cve-icon
https://access.redhat.com/errata/RHSA-2026:25252 cve-icon
https://access.redhat.com/errata/RHSA-2026:25253 cve-icon
https://access.redhat.com/errata/RHSA-2026:26445 cve-icon
https://access.redhat.com/errata/RHSA-2026:26527 cve-icon
https://access.redhat.com/errata/RHSA-2026:26541 cve-icon
https://access.redhat.com/errata/RHSA-2026:26568 cve-icon
https://access.redhat.com/errata/RHSA-2026:26585 cve-icon
https://access.redhat.com/errata/RHSA-2026:26636 cve-icon
https://access.redhat.com/errata/RHSA-2026:27076 cve-icon
https://access.redhat.com/errata/RHSA-2026:28047 cve-icon
https://access.redhat.com/errata/RHSA-2026:28441 cve-icon
https://access.redhat.com/errata/RHSA-2026:28886 cve-icon
https://access.redhat.com/errata/RHSA-2026:28893 cve-icon
https://access.redhat.com/errata/RHSA-2026:28961 cve-icon
https://access.redhat.com/errata/RHSA-2026:29035 cve-icon
https://access.redhat.com/errata/RHSA-2026:29195 cve-icon
https://access.redhat.com/errata/RHSA-2026:29455 cve-icon
https://access.redhat.com/errata/RHSA-2026:29702 cve-icon
https://access.redhat.com/errata/RHSA-2026:29703 cve-icon
https://access.redhat.com/errata/RHSA-2026:29854 cve-icon
https://access.redhat.com/errata/RHSA-2026:33722 cve-icon
https://access.redhat.com/errata/RHSA-2026:34097 cve-icon
https://access.redhat.com/errata/RHSA-2026:34365 cve-icon
https://access.redhat.com/errata/RHSA-2026:36317 cve-icon
https://access.redhat.com/errata/RHSA-2026:36319 cve-icon
https://access.redhat.com/errata/RHSA-2026:36651 cve-icon
https://access.redhat.com/errata/RHSA-2026:36796 cve-icon
https://access.redhat.com/errata/RHSA-2026:39810 cve-icon
https://access.redhat.com/errata/RHSA-2026:40118 cve-icon
https://access.redhat.com/errata/RHSA-2026:40945 cve-icon
https://access.redhat.com/errata/RHSA-2026:41019 cve-icon
https://access.redhat.com/errata/RHSA-2026:41928 cve-icon
https://access.redhat.com/errata/RHSA-2026:42150 cve-icon
https://access.redhat.com/errata/RHSA-2026:42151 cve-icon
https://access.redhat.com/errata/RHSA-2026:48036 cve-icon
https://access.redhat.com/errata/RHSA-2026:49944 cve-icon
https://access.redhat.com/errata/RHSA-2026:5110 cve-icon
https://access.redhat.com/errata/RHSA-2026:51288 cve-icon
https://access.redhat.com/errata/RHSA-2026:52389 cve-icon
https://access.redhat.com/errata/RHSA-2026:52390 cve-icon
https://access.redhat.com/errata/RHSA-2026:52391 cve-icon
https://access.redhat.com/errata/RHSA-2026:54191 cve-icon
https://access.redhat.com/errata/RHSA-2026:54757 cve-icon
https://access.redhat.com/errata/RHSA-2026:5549 cve-icon
https://access.redhat.com/errata/RHSA-2026:5941 cve-icon
https://access.redhat.com/errata/RHSA-2026:5942 cve-icon
https://access.redhat.com/errata/RHSA-2026:5943 cve-icon
https://access.redhat.com/errata/RHSA-2026:5944 cve-icon
https://access.redhat.com/errata/RHSA-2026:6341 cve-icon
https://access.redhat.com/errata/RHSA-2026:6344 cve-icon
https://access.redhat.com/errata/RHSA-2026:6382 cve-icon
https://access.redhat.com/errata/RHSA-2026:6383 cve-icon
https://access.redhat.com/errata/RHSA-2026:6388 cve-icon
https://access.redhat.com/errata/RHSA-2026:6564 cve-icon
https://access.redhat.com/errata/RHSA-2026:6720 cve-icon
https://access.redhat.com/errata/RHSA-2026:6802 cve-icon
https://access.redhat.com/errata/RHSA-2026:6949 cve-icon
https://access.redhat.com/errata/RHSA-2026:7005 cve-icon
https://access.redhat.com/errata/RHSA-2026:7009 cve-icon
https://access.redhat.com/errata/RHSA-2026:7011 cve-icon
https://access.redhat.com/errata/RHSA-2026:7259 cve-icon
https://access.redhat.com/errata/RHSA-2026:7291 cve-icon
https://access.redhat.com/errata/RHSA-2026:7315 cve-icon
https://access.redhat.com/errata/RHSA-2026:7328 cve-icon
https://access.redhat.com/errata/RHSA-2026:7385 cve-icon
https://access.redhat.com/errata/RHSA-2026:7665 cve-icon
https://access.redhat.com/errata/RHSA-2026:7669 cve-icon
https://access.redhat.com/errata/RHSA-2026:7674 cve-icon
https://access.redhat.com/errata/RHSA-2026:7833 cve-icon
https://access.redhat.com/errata/RHSA-2026:7834 cve-icon
https://access.redhat.com/errata/RHSA-2026:7876 cve-icon
https://access.redhat.com/errata/RHSA-2026:7877 cve-icon
https://access.redhat.com/errata/RHSA-2026:7878 cve-icon
https://access.redhat.com/errata/RHSA-2026:7879 cve-icon
https://access.redhat.com/errata/RHSA-2026:7883 cve-icon
https://access.redhat.com/errata/RHSA-2026:7992 cve-icon
https://access.redhat.com/errata/RHSA-2026:8151 cve-icon
https://access.redhat.com/errata/RHSA-2026:8167 cve-icon
https://access.redhat.com/errata/RHSA-2026:8314 cve-icon
https://access.redhat.com/errata/RHSA-2026:8322 cve-icon
https://access.redhat.com/errata/RHSA-2026:8324 cve-icon
https://access.redhat.com/errata/RHSA-2026:8337 cve-icon
https://access.redhat.com/errata/RHSA-2026:8338 cve-icon
https://access.redhat.com/errata/RHSA-2026:8433 cve-icon
https://access.redhat.com/errata/RHSA-2026:8434 cve-icon
https://access.redhat.com/errata/RHSA-2026:8456 cve-icon
https://access.redhat.com/errata/RHSA-2026:8483 cve-icon
https://access.redhat.com/errata/RHSA-2026:8484 cve-icon
https://access.redhat.com/errata/RHSA-2026:8490 cve-icon
https://access.redhat.com/errata/RHSA-2026:8491 cve-icon
https://access.redhat.com/errata/RHSA-2026:8493 cve-icon
https://access.redhat.com/errata/RHSA-2026:8840 cve-icon
https://access.redhat.com/errata/RHSA-2026:8841 cve-icon
https://access.redhat.com/errata/RHSA-2026:8842 cve-icon
https://access.redhat.com/errata/RHSA-2026:8845 cve-icon
https://access.redhat.com/errata/RHSA-2026:8847 cve-icon
https://access.redhat.com/errata/RHSA-2026:8848 cve-icon
https://access.redhat.com/errata/RHSA-2026:8849 cve-icon
https://access.redhat.com/errata/RHSA-2026:8851 cve-icon
https://access.redhat.com/errata/RHSA-2026:8852 cve-icon
https://access.redhat.com/errata/RHSA-2026:8853 cve-icon
https://access.redhat.com/errata/RHSA-2026:8855 cve-icon
https://access.redhat.com/errata/RHSA-2026:8856 cve-icon
https://access.redhat.com/errata/RHSA-2026:8860 cve-icon
https://access.redhat.com/errata/RHSA-2026:8877 cve-icon
https://access.redhat.com/errata/RHSA-2026:8878 cve-icon
https://access.redhat.com/errata/RHSA-2026:8879 cve-icon
https://access.redhat.com/errata/RHSA-2026:8881 cve-icon
https://access.redhat.com/errata/RHSA-2026:8882 cve-icon
https://access.redhat.com/errata/RHSA-2026:8930 cve-icon
https://access.redhat.com/errata/RHSA-2026:8931 cve-icon
https://access.redhat.com/errata/RHSA-2026:8949 cve-icon
https://access.redhat.com/errata/RHSA-2026:9043 cve-icon
https://access.redhat.com/errata/RHSA-2026:9044 cve-icon
https://access.redhat.com/errata/RHSA-2026:9052 cve-icon
https://access.redhat.com/errata/RHSA-2026:9090 cve-icon
https://access.redhat.com/errata/RHSA-2026:9093 cve-icon
https://access.redhat.com/errata/RHSA-2026:9094 cve-icon
https://access.redhat.com/errata/RHSA-2026:9097 cve-icon
https://access.redhat.com/errata/RHSA-2026:9098 cve-icon
https://access.redhat.com/errata/RHSA-2026:9108 cve-icon
https://access.redhat.com/errata/RHSA-2026:9109 cve-icon
https://access.redhat.com/errata/RHSA-2026:9385 cve-icon
https://access.redhat.com/errata/RHSA-2026:9434 cve-icon
https://access.redhat.com/errata/RHSA-2026:9435 cve-icon
https://access.redhat.com/errata/RHSA-2026:9436 cve-icon
https://access.redhat.com/errata/RHSA-2026:9439 cve-icon
https://access.redhat.com/errata/RHSA-2026:9440 cve-icon
https://access.redhat.com/errata/RHSA-2026:9448 cve-icon
https://access.redhat.com/errata/RHSA-2026:9453 cve-icon
https://access.redhat.com/errata/RHSA-2026:9461 cve-icon
https://access.redhat.com/errata/RHSA-2026:9695 cve-icon
https://access.redhat.com/errata/RHSA-2026:9742 cve-icon
https://access.redhat.com/errata/RHSA-2026:9872 cve-icon
https://access.redhat.com/security/cve/CVE-2026-25679 cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2445356 cve-icon
https://go.dev/cl/752180 cve-icon cve-icon cve-icon
https://go.dev/issue/77578 cve-icon cve-icon cve-icon
https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-25679 cve-icon
https://pkg.go.dev/vuln/GO-2026-4601 cve-icon cve-icon cve-icon
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25679.json cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-25679 cve-icon
History

Fri, 14 Aug 2026 13:30:00 +0000

Type Values Removed Values Added
References

Wed, 12 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
References

Tue, 21 Apr 2026 14:45:00 +0000

Type Values Removed Values Added
First Time appeared Golang
Golang go
Weaknesses CWE-425
CPEs cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*
cpe:2.3:a:golang:go:1.26.0:*:*:*:*:*:*:*
Vendors & Products Golang
Golang go

Wed, 11 Mar 2026 12:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-1286
References
Metrics threat_severity

None

threat_severity

Moderate


Tue, 10 Mar 2026 14:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Mon, 09 Mar 2026 10:15:00 +0000

Type Values Removed Values Added
First Time appeared Go Standard Library
Go Standard Library net/url
Vendors & Products Go Standard Library
Go Standard Library net/url

Fri, 06 Mar 2026 21:45:00 +0000

Type Values Removed Values Added
Description url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
Title Incorrect parsing of IPv6 host literals in net/url
References

Subscriptions

Go Standard Library Net/url
Golang Go
cve-icon MITRE

Status: PUBLISHED

Assigner: Go

Published:

Updated: 2026-08-14T12:04:41.999Z

Reserved: 2026-02-05T01:33:41.943Z

Link: CVE-2026-25679

cve-icon Vulnrichment

Updated: 2026-08-14T12:04:41.999Z

cve-icon NVD

Status : Modified

Published: 2026-03-06T22:16:00.720

Modified: 2026-08-14T13:17:46.517

Link: CVE-2026-25679

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-03-06T21:28:14Z

Links: CVE-2026-25679 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-04-21T23:45:02Z

Weaknesses