4.4
Moyenne
CVE-2025-22870 Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component
Description
Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| golang.org/x/net/http/httpproxy 0.36 | premières → < 0.36.0 | 0.36.0 |
| golang.org/x/net/proxy 0.36 | premières → < 0.36.0 | 0.36.0 |
| net/http 1.24 | 1.24.0-0 → < 1.24.1 | 1.24.1 |
| net/http 1.23 | premières → < 1.23.7 | 1.23.7 |
Références
- go.dev go.dev
- go.dev go.dev
- groups.google.com groups.google.com
- pkg.go.dev pkg.go.dev
Chronologie
- Publiée
- Dernière modification