TI-2026-20764 CVE-2026-25679 · GHSA-j3gx-2473-5fp8
Incorrect parsing of IPv6 host literals in net/url
Priority MEDIUM 40
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
rhc security update
Released 2026-04-15 · Red Hat rating Critical · View on Red Hat →
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption.