TI-2026-20764 CVE-2026-25679 · GHSA-j3gx-2473-5fp8
Incorrect parsing of IPv6 host literals in net/url
Priority MEDIUM 40
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
RHSA-2026:5942
golang security update
Released 2026-03-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) go-toolset-1.25.8-1.el9_7, golang-1.25.8-1.el9_7, golang-bin-1.25.8-1.el9_7 +5
Fixes 2 records
TI-2025-38133 CVE-2025-61731 · GHSA-xvqr-69v8-f3gv
Arbitrary file write using cgo pkg-config directive in cmd/go
Priority LOW 37
Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content.