Name
CVE-2026-25679
Description
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
CWEs
Published Date
Updated Date
Workaround
-
Advisories
https://go.dev/cl/752180Mailing List
https://go.dev/issue/77578Issue Tracking
https://pkg.go.dev/vuln/GO-2026-4601Vendor Advisory
Analysis#
Vulnerability Ratings#
7.5
CVSSv31
NaN
other
Others affected components#
Name
Project
Project Version
Version
Status
openwrt
master
1.24.13-r1
Exploitable
openwrt
master
1.26.4-r1
Not Affected
openwrt
openwrt-25.12
1.24.13-r1
Exploitable
openwrt
openwrt-25.12
1.26.4-r1
Not Affected
yocto
kirkstone
1.17.13
Exploitable
yocto
kirkstone
1.17.13
Exploitable
yocto
master
1.26.4
Not Affected
yocto
master
1.26.4
Not Affected