{"schema_version":"1.9.0","id":"BIT-golang-2026-25679","published":"2026-03-10T08:44:09.300Z","modified":"2026-09-08T08:47:49.862646801Z","aliases":["CVE-2026-25679","GO-2026-4601"],"summary":"Incorrect parsing of IPv6 host literals in net/url","details":"url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.","affected":[{"package":{"name":"golang","ecosystem":"Bitnami","purl":"pkg:bitnami/golang"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.25.8"},{"introduced":"1.26.0-0"},{"fixed":"1.26.1"}]}],"database_specific":{"source":"https://github.com/bitnami/vulndb/tree/main/data/golang/BIT-golang-2026-25679.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}],"references":[{"type":"DISCUSSION","url":"https://go.dev/cl/752180"},{"type":"REPORT","url":"https://go.dev/issue/77578"},{"type":"ARTICLE","url":"https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25679"},{"type":"ADVISORY","url":"https://pkg.go.dev/vuln/GO-2026-4601"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:10065"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:10125"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:10133"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:10140"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:10141"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:10158"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:10169"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:10175"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:10184"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:10225"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:10250"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:10701"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:10712"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:10929"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:11217"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:11375"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:11412"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:11413"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:11686"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:11688"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:11747"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:11749"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:11768"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:11800"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:11856"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:11916"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:11996"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:12028"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:12029"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:12030"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:12031"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:12032"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:12033"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:12282"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:13508"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:13512"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:13545"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:13642"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:13643"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:13671"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:13791"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:13829"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:14020"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:14100"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:14774"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:14868"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:14879"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:15091"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:16102"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:16696"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:16874"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:16875"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:17040"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:17084"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:17287"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:17598"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19017"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19022"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19026"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19027"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19031"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19032"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19049"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19055"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19126"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19128"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19132"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19133"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19135"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19181"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19184"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19185"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19207"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19350"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19353"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19375"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19475"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19634"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19719"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19720"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19721"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:19750"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:20041"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:20088"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:20581"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:20582"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:20584"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:20889"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:21017"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:21655"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:21657"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:21691"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:21696"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:21769"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:22347"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:22423"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:22450"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:22627"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:22714"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:22733"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:22862"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:22937"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:23228"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:23345"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:24386"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:24853"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:25043"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:25127"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:25180"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:25248"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:25250"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:25251"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:25252"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:25253"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:26445"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:26527"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:26541"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:26568"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:26585"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:26636"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:27076"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:28047"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:28441"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:28886"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:28893"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:29035"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:29195"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:29455"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:29702"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:29703"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:29854"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:33722"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:34365"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:5110"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:5549"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:5941"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:5942"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:5943"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:5944"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:6341"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:6344"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:6382"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:6383"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:6388"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:6564"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:6720"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:6802"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:6949"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:7005"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:7009"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:7011"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:7259"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:7291"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:7315"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:7328"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:7385"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:7665"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:7669"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:7674"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:7833"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:7834"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:7876"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:7877"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:7878"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:7879"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:7883"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:7992"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8151"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8167"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8314"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8322"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8324"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8337"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8338"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8433"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8434"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8456"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8483"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8484"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8490"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8491"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8493"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8840"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8841"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8842"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8845"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8847"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8848"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8849"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8851"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8852"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8853"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8855"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8856"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8860"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8877"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8878"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8879"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8881"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8882"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8930"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8931"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:8949"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9043"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9044"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9052"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9090"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9093"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9094"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9097"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9098"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9108"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9109"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9385"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9434"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9435"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9436"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9439"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9440"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9448"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9453"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9461"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9695"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9742"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:9872"},{"type":"WEB","url":"https://access.redhat.com/security/cve/CVE-2026-25679"},{"type":"WEB","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445356"},{"type":"WEB","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25679.json"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:28961"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:36317"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:36319"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:34097"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:36651"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:36796"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:39810"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:40118"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:40945"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:41019"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:41928"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:42150"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:42151"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:48036"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:49944"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:51288"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:52389"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:52390"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:52391"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:54191"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:54757"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:56785"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:56852"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:56910"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:57482"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:59830"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:60018"}],"database_specific":{"cpes":["cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*"],"severity":"High"}}