url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.

Project Subscriptions

Vendors Products
Go Standard Library Subscribe
Net/url Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

References
Link Providers
https://access.redhat.com/errata/RHSA-2026:10065 cve-icon
https://access.redhat.com/errata/RHSA-2026:10125 cve-icon
https://access.redhat.com/errata/RHSA-2026:10133 cve-icon
https://access.redhat.com/errata/RHSA-2026:10140 cve-icon
https://access.redhat.com/errata/RHSA-2026:10141 cve-icon
https://access.redhat.com/errata/RHSA-2026:10158 cve-icon
https://access.redhat.com/errata/RHSA-2026:10169 cve-icon
https://access.redhat.com/errata/RHSA-2026:10175 cve-icon
https://access.redhat.com/errata/RHSA-2026:10184 cve-icon
https://access.redhat.com/errata/RHSA-2026:10225 cve-icon
https://access.redhat.com/errata/RHSA-2026:10250 cve-icon
https://access.redhat.com/errata/RHSA-2026:10701 cve-icon
https://access.redhat.com/errata/RHSA-2026:10712 cve-icon
https://access.redhat.com/errata/RHSA-2026:10929 cve-icon
https://access.redhat.com/errata/RHSA-2026:11217 cve-icon
https://access.redhat.com/errata/RHSA-2026:11375 cve-icon
https://access.redhat.com/errata/RHSA-2026:11412 cve-icon
https://access.redhat.com/errata/RHSA-2026:11413 cve-icon
https://access.redhat.com/errata/RHSA-2026:11686 cve-icon
https://access.redhat.com/errata/RHSA-2026:11688 cve-icon
https://access.redhat.com/errata/RHSA-2026:11747 cve-icon
https://access.redhat.com/errata/RHSA-2026:11749 cve-icon
https://access.redhat.com/errata/RHSA-2026:11768 cve-icon
https://access.redhat.com/errata/RHSA-2026:11800 cve-icon
https://access.redhat.com/errata/RHSA-2026:11856 cve-icon
https://access.redhat.com/errata/RHSA-2026:11916 cve-icon
https://access.redhat.com/errata/RHSA-2026:11996 cve-icon
https://access.redhat.com/errata/RHSA-2026:12028 cve-icon
https://access.redhat.com/errata/RHSA-2026:12029 cve-icon
https://access.redhat.com/errata/RHSA-2026:12030 cve-icon
https://access.redhat.com/errata/RHSA-2026:12031 cve-icon
https://access.redhat.com/errata/RHSA-2026:12032 cve-icon
https://access.redhat.com/errata/RHSA-2026:12033 cve-icon
https://access.redhat.com/errata/RHSA-2026:12282 cve-icon
https://access.redhat.com/errata/RHSA-2026:13508 cve-icon
https://access.redhat.com/errata/RHSA-2026:13512 cve-icon
https://access.redhat.com/errata/RHSA-2026:13545 cve-icon
https://access.redhat.com/errata/RHSA-2026:13642 cve-icon
https://access.redhat.com/errata/RHSA-2026:13643 cve-icon
https://access.redhat.com/errata/RHSA-2026:13671 cve-icon
https://access.redhat.com/errata/RHSA-2026:13791 cve-icon
https://access.redhat.com/errata/RHSA-2026:13829 cve-icon
https://access.redhat.com/errata/RHSA-2026:14020 cve-icon
https://access.redhat.com/errata/RHSA-2026:14100 cve-icon
https://access.redhat.com/errata/RHSA-2026:14774 cve-icon
https://access.redhat.com/errata/RHSA-2026:14868 cve-icon
https://access.redhat.com/errata/RHSA-2026:14879 cve-icon
https://access.redhat.com/errata/RHSA-2026:15091 cve-icon
https://access.redhat.com/errata/RHSA-2026:16102 cve-icon
https://access.redhat.com/errata/RHSA-2026:16696 cve-icon
https://access.redhat.com/errata/RHSA-2026:16874 cve-icon
https://access.redhat.com/errata/RHSA-2026:16875 cve-icon
https://access.redhat.com/errata/RHSA-2026:17040 cve-icon
https://access.redhat.com/errata/RHSA-2026:17084 cve-icon
https://access.redhat.com/errata/RHSA-2026:17287 cve-icon
https://access.redhat.com/errata/RHSA-2026:17598 cve-icon
https://access.redhat.com/errata/RHSA-2026:19017 cve-icon
https://access.redhat.com/errata/RHSA-2026:19022 cve-icon
https://access.redhat.com/errata/RHSA-2026:19026 cve-icon
https://access.redhat.com/errata/RHSA-2026:19027 cve-icon
https://access.redhat.com/errata/RHSA-2026:19031 cve-icon
https://access.redhat.com/errata/RHSA-2026:19032 cve-icon
https://access.redhat.com/errata/RHSA-2026:19049 cve-icon
https://access.redhat.com/errata/RHSA-2026:19055 cve-icon
https://access.redhat.com/errata/RHSA-2026:19126 cve-icon
https://access.redhat.com/errata/RHSA-2026:19128 cve-icon
https://access.redhat.com/errata/RHSA-2026:19132 cve-icon
https://access.redhat.com/errata/RHSA-2026:19133 cve-icon
https://access.redhat.com/errata/RHSA-2026:19135 cve-icon
https://access.redhat.com/errata/RHSA-2026:19181 cve-icon
https://access.redhat.com/errata/RHSA-2026:19184 cve-icon
https://access.redhat.com/errata/RHSA-2026:19185 cve-icon
https://access.redhat.com/errata/RHSA-2026:19207 cve-icon
https://access.redhat.com/errata/RHSA-2026:19350 cve-icon
https://access.redhat.com/errata/RHSA-2026:19353 cve-icon
https://access.redhat.com/errata/RHSA-2026:19375 cve-icon
https://access.redhat.com/errata/RHSA-2026:19475 cve-icon
https://access.redhat.com/errata/RHSA-2026:19634 cve-icon
https://access.redhat.com/errata/RHSA-2026:19719 cve-icon
https://access.redhat.com/errata/RHSA-2026:19720 cve-icon
https://access.redhat.com/errata/RHSA-2026:19721 cve-icon
https://access.redhat.com/errata/RHSA-2026:19750 cve-icon
https://access.redhat.com/errata/RHSA-2026:20041 cve-icon
https://access.redhat.com/errata/RHSA-2026:20088 cve-icon
https://access.redhat.com/errata/RHSA-2026:20581 cve-icon
https://access.redhat.com/errata/RHSA-2026:20582 cve-icon
https://access.redhat.com/errata/RHSA-2026:20584 cve-icon
https://access.redhat.com/errata/RHSA-2026:20889 cve-icon
https://access.redhat.com/errata/RHSA-2026:21017 cve-icon
https://access.redhat.com/errata/RHSA-2026:21655 cve-icon
https://access.redhat.com/errata/RHSA-2026:21657 cve-icon
https://access.redhat.com/errata/RHSA-2026:21691 cve-icon
https://access.redhat.com/errata/RHSA-2026:21696 cve-icon
https://access.redhat.com/errata/RHSA-2026:21769 cve-icon
https://access.redhat.com/errata/RHSA-2026:22347 cve-icon
https://access.redhat.com/errata/RHSA-2026:22423 cve-icon
https://access.redhat.com/errata/RHSA-2026:22450 cve-icon
https://access.redhat.com/errata/RHSA-2026:22627 cve-icon
https://access.redhat.com/errata/RHSA-2026:22714 cve-icon
https://access.redhat.com/errata/RHSA-2026:22733 cve-icon
https://access.redhat.com/errata/RHSA-2026:22862 cve-icon
https://access.redhat.com/errata/RHSA-2026:22937 cve-icon
https://access.redhat.com/errata/RHSA-2026:23228 cve-icon
https://access.redhat.com/errata/RHSA-2026:23345 cve-icon
https://access.redhat.com/errata/RHSA-2026:24386 cve-icon
https://access.redhat.com/errata/RHSA-2026:24853 cve-icon
https://access.redhat.com/errata/RHSA-2026:25043 cve-icon
https://access.redhat.com/errata/RHSA-2026:25127 cve-icon
https://access.redhat.com/errata/RHSA-2026:25180 cve-icon
https://access.redhat.com/errata/RHSA-2026:25248 cve-icon
https://access.redhat.com/errata/RHSA-2026:25250 cve-icon
https://access.redhat.com/errata/RHSA-2026:25251 cve-icon
https://access.redhat.com/errata/RHSA-2026:25252 cve-icon
https://access.redhat.com/errata/RHSA-2026:25253 cve-icon
https://access.redhat.com/errata/RHSA-2026:26445 cve-icon
https://access.redhat.com/errata/RHSA-2026:26527 cve-icon
https://access.redhat.com/errata/RHSA-2026:26541 cve-icon
https://access.redhat.com/errata/RHSA-2026:26568 cve-icon
https://access.redhat.com/errata/RHSA-2026:26585 cve-icon
https://access.redhat.com/errata/RHSA-2026:26636 cve-icon
https://access.redhat.com/errata/RHSA-2026:27076 cve-icon
https://access.redhat.com/errata/RHSA-2026:28047 cve-icon
https://access.redhat.com/errata/RHSA-2026:28441 cve-icon
https://access.redhat.com/errata/RHSA-2026:28886 cve-icon
https://access.redhat.com/errata/RHSA-2026:28893 cve-icon
https://access.redhat.com/errata/RHSA-2026:28961 cve-icon
https://access.redhat.com/errata/RHSA-2026:29035 cve-icon
https://access.redhat.com/errata/RHSA-2026:29195 cve-icon
https://access.redhat.com/errata/RHSA-2026:29455 cve-icon
https://access.redhat.com/errata/RHSA-2026:29702 cve-icon
https://access.redhat.com/errata/RHSA-2026:29703 cve-icon
https://access.redhat.com/errata/RHSA-2026:29854 cve-icon
https://access.redhat.com/errata/RHSA-2026:33722 cve-icon
https://access.redhat.com/errata/RHSA-2026:34097 cve-icon
https://access.redhat.com/errata/RHSA-2026:34365 cve-icon
https://access.redhat.com/errata/RHSA-2026:36317 cve-icon
https://access.redhat.com/errata/RHSA-2026:36319 cve-icon
https://access.redhat.com/errata/RHSA-2026:36651 cve-icon
https://access.redhat.com/errata/RHSA-2026:36796 cve-icon
https://access.redhat.com/errata/RHSA-2026:39810 cve-icon
https://access.redhat.com/errata/RHSA-2026:40118 cve-icon
https://access.redhat.com/errata/RHSA-2026:40945 cve-icon
https://access.redhat.com/errata/RHSA-2026:41019 cve-icon
https://access.redhat.com/errata/RHSA-2026:41928 cve-icon
https://access.redhat.com/errata/RHSA-2026:42150 cve-icon
https://access.redhat.com/errata/RHSA-2026:42151 cve-icon
https://access.redhat.com/errata/RHSA-2026:48036 cve-icon
https://access.redhat.com/errata/RHSA-2026:49944 cve-icon
https://access.redhat.com/errata/RHSA-2026:5110 cve-icon
https://access.redhat.com/errata/RHSA-2026:51288 cve-icon
https://access.redhat.com/errata/RHSA-2026:52389 cve-icon
https://access.redhat.com/errata/RHSA-2026:52390 cve-icon
https://access.redhat.com/errata/RHSA-2026:52391 cve-icon
https://access.redhat.com/errata/RHSA-2026:54191 cve-icon
https://access.redhat.com/errata/RHSA-2026:5549 cve-icon
https://access.redhat.com/errata/RHSA-2026:5941 cve-icon
https://access.redhat.com/errata/RHSA-2026:5942 cve-icon
https://access.redhat.com/errata/RHSA-2026:5943 cve-icon
https://access.redhat.com/errata/RHSA-2026:5944 cve-icon
https://access.redhat.com/errata/RHSA-2026:6341 cve-icon
https://access.redhat.com/errata/RHSA-2026:6344 cve-icon
https://access.redhat.com/errata/RHSA-2026:6382 cve-icon
https://access.redhat.com/errata/RHSA-2026:6383 cve-icon
https://access.redhat.com/errata/RHSA-2026:6388 cve-icon
https://access.redhat.com/errata/RHSA-2026:6564 cve-icon
https://access.redhat.com/errata/RHSA-2026:6720 cve-icon
https://access.redhat.com/errata/RHSA-2026:6802 cve-icon
https://access.redhat.com/errata/RHSA-2026:6949 cve-icon
https://access.redhat.com/errata/RHSA-2026:7005 cve-icon
https://access.redhat.com/errata/RHSA-2026:7009 cve-icon
https://access.redhat.com/errata/RHSA-2026:7011 cve-icon
https://access.redhat.com/errata/RHSA-2026:7259 cve-icon
https://access.redhat.com/errata/RHSA-2026:7291 cve-icon
https://access.redhat.com/errata/RHSA-2026:7315 cve-icon
https://access.redhat.com/errata/RHSA-2026:7328 cve-icon
https://access.redhat.com/errata/RHSA-2026:7385 cve-icon
https://access.redhat.com/errata/RHSA-2026:7665 cve-icon
https://access.redhat.com/errata/RHSA-2026:7669 cve-icon
https://access.redhat.com/errata/RHSA-2026:7674 cve-icon
https://access.redhat.com/errata/RHSA-2026:7833 cve-icon
https://access.redhat.com/errata/RHSA-2026:7834 cve-icon
https://access.redhat.com/errata/RHSA-2026:7876 cve-icon
https://access.redhat.com/errata/RHSA-2026:7877 cve-icon
https://access.redhat.com/errata/RHSA-2026:7878 cve-icon
https://access.redhat.com/errata/RHSA-2026:7879 cve-icon
https://access.redhat.com/errata/RHSA-2026:7883 cve-icon
https://access.redhat.com/errata/RHSA-2026:7992 cve-icon
https://access.redhat.com/errata/RHSA-2026:8151 cve-icon
https://access.redhat.com/errata/RHSA-2026:8167 cve-icon
https://access.redhat.com/errata/RHSA-2026:8314 cve-icon
https://access.redhat.com/errata/RHSA-2026:8322 cve-icon
https://access.redhat.com/errata/RHSA-2026:8324 cve-icon
https://access.redhat.com/errata/RHSA-2026:8337 cve-icon
https://access.redhat.com/errata/RHSA-2026:8338 cve-icon
https://access.redhat.com/errata/RHSA-2026:8433 cve-icon
https://access.redhat.com/errata/RHSA-2026:8434 cve-icon
https://access.redhat.com/errata/RHSA-2026:8456 cve-icon
https://access.redhat.com/errata/RHSA-2026:8483 cve-icon
https://access.redhat.com/errata/RHSA-2026:8484 cve-icon
https://access.redhat.com/errata/RHSA-2026:8490 cve-icon
https://access.redhat.com/errata/RHSA-2026:8491 cve-icon
https://access.redhat.com/errata/RHSA-2026:8493 cve-icon
https://access.redhat.com/errata/RHSA-2026:8840 cve-icon
https://access.redhat.com/errata/RHSA-2026:8841 cve-icon
https://access.redhat.com/errata/RHSA-2026:8842 cve-icon
https://access.redhat.com/errata/RHSA-2026:8845 cve-icon
https://access.redhat.com/errata/RHSA-2026:8847 cve-icon
https://access.redhat.com/errata/RHSA-2026:8848 cve-icon
https://access.redhat.com/errata/RHSA-2026:8849 cve-icon
https://access.redhat.com/errata/RHSA-2026:8851 cve-icon
https://access.redhat.com/errata/RHSA-2026:8852 cve-icon
https://access.redhat.com/errata/RHSA-2026:8853 cve-icon
https://access.redhat.com/errata/RHSA-2026:8855 cve-icon
https://access.redhat.com/errata/RHSA-2026:8856 cve-icon
https://access.redhat.com/errata/RHSA-2026:8860 cve-icon
https://access.redhat.com/errata/RHSA-2026:8877 cve-icon
https://access.redhat.com/errata/RHSA-2026:8878 cve-icon
https://access.redhat.com/errata/RHSA-2026:8879 cve-icon
https://access.redhat.com/errata/RHSA-2026:8881 cve-icon
https://access.redhat.com/errata/RHSA-2026:8882 cve-icon
https://access.redhat.com/errata/RHSA-2026:8930 cve-icon
https://access.redhat.com/errata/RHSA-2026:8931 cve-icon
https://access.redhat.com/errata/RHSA-2026:8949 cve-icon
https://access.redhat.com/errata/RHSA-2026:9043 cve-icon
https://access.redhat.com/errata/RHSA-2026:9044 cve-icon
https://access.redhat.com/errata/RHSA-2026:9052 cve-icon
https://access.redhat.com/errata/RHSA-2026:9090 cve-icon
https://access.redhat.com/errata/RHSA-2026:9093 cve-icon
https://access.redhat.com/errata/RHSA-2026:9094 cve-icon
https://access.redhat.com/errata/RHSA-2026:9097 cve-icon
https://access.redhat.com/errata/RHSA-2026:9098 cve-icon
https://access.redhat.com/errata/RHSA-2026:9108 cve-icon
https://access.redhat.com/errata/RHSA-2026:9109 cve-icon
https://access.redhat.com/errata/RHSA-2026:9385 cve-icon
https://access.redhat.com/errata/RHSA-2026:9434 cve-icon
https://access.redhat.com/errata/RHSA-2026:9435 cve-icon
https://access.redhat.com/errata/RHSA-2026:9436 cve-icon
https://access.redhat.com/errata/RHSA-2026:9439 cve-icon
https://access.redhat.com/errata/RHSA-2026:9440 cve-icon
https://access.redhat.com/errata/RHSA-2026:9448 cve-icon
https://access.redhat.com/errata/RHSA-2026:9453 cve-icon
https://access.redhat.com/errata/RHSA-2026:9461 cve-icon
https://access.redhat.com/errata/RHSA-2026:9695 cve-icon
https://access.redhat.com/errata/RHSA-2026:9742 cve-icon
https://access.redhat.com/errata/RHSA-2026:9872 cve-icon
https://access.redhat.com/security/cve/CVE-2026-25679 cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2445356 cve-icon
https://go.dev/cl/752180 cve-icon cve-icon cve-icon
https://go.dev/issue/77578 cve-icon cve-icon cve-icon
https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-25679 cve-icon
https://pkg.go.dev/vuln/GO-2026-4601 cve-icon cve-icon cve-icon
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25679.json cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-25679 cve-icon
History

Wed, 12 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
References

Tue, 21 Apr 2026 14:45:00 +0000

Type Values Removed Values Added
First Time appeared Golang
Golang go
Weaknesses CWE-425
CPEs cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*
cpe:2.3:a:golang:go:1.26.0:*:*:*:*:*:*:*
Vendors & Products Golang
Golang go

Wed, 11 Mar 2026 12:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-1286
References
Metrics threat_severity

None

threat_severity

Moderate


Tue, 10 Mar 2026 14:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Mon, 09 Mar 2026 10:15:00 +0000

Type Values Removed Values Added
First Time appeared Go Standard Library
Go Standard Library net/url
Vendors & Products Go Standard Library
Go Standard Library net/url

Fri, 06 Mar 2026 21:45:00 +0000

Type Values Removed Values Added
Description url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
Title Incorrect parsing of IPv6 host literals in net/url
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Go

Published:

Updated: 2026-08-13T12:04:28.432Z

Reserved: 2026-02-05T01:33:41.943Z

Link: CVE-2026-25679

cve-icon Vulnrichment

Updated: 2026-08-13T12:04:28.432Z

cve-icon NVD

Status : Modified

Published: 2026-03-06T22:16:00.720

Modified: 2026-08-13T13:17:58.220

Link: CVE-2026-25679

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-03-06T21:28:14Z

Links: CVE-2026-25679 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-04-21T23:45:02Z

Weaknesses