7.5
Élevée
CVE-2026-25679 url.Parse insufficiently validated the host/authority component and accepted some invalid URLs
Description
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Ansible Automation Platform 2.6 for RHEL 10 | Versions non publiées | |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Versions non publiées | |
| Red Hat Ansible Automation Platform 2.5 for RHEL 8 | Versions non publiées | |
| Red Hat OpenShift Container Platform 4.12 1777001645 | premières → < 1777001645 | 1777001645 |
| Red Hat OpenShift Container Platform 4.13 1779889628 | premières → < 1779889628 | 1779889628 |
| Red Hat OpenShift Container Platform 4.16 1779254541 | premières → < 1779254541 | 1779254541 |
| Red Hat OpenShift Container Platform 4.18 1779787600 | premières → < 1779787600 | 1779787600 |
| Red Hat Satellite 6.16 for RHEL 8 | Versions non publiées | |
| Red Hat Ansible Automation Platform 2.5 for RHEL 9 | Versions non publiées |
Afficher les 209 autres branches Masquer les 209 autres branches
Références
- go.dev go.dev
- go.dev go.dev
- groups.google.com groups.google.com
- pkg.go.dev pkg.go.dev
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat Ansible Automation Platform 2.6 for RHEL 10
Les 36 CVE de Red Hat Ansible Automation Platform 2.6 for RHEL 10 →
CVE-2026-11332
Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution
7.8
Élevée
CVE-2026-27145
(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…
6.5
Moyenne
CVE-2026-39821
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
9.6
Critique
CVE-2026-33811
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…
7.5
Élevée