TI-2026-20764 CVE-2026-25679 · GHSA-j3gx-2473-5fp8
Incorrect parsing of IPv6 host literals in net/url
Priority MEDIUM 40
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
image-builder security update
Released 2026-05-05 · Red Hat rating Important · View on Red Hat →
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.