{"answers":{"affected":"2 open source packages ship an affected version, including golang and stdlib. It affects 1 product.","exploited":"There is no known exploitation of CVE-2026-25679 in the wild and no public exploit code.","fix":"Upgrade golang to a fixed version for your release line: 1.25.8 or 1.26.1.","what":"CVE-2026-25679 is a high-severity vulnerability in Golang Go, published on 6 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2026-25679 and fix it if it is affected.\n\nWhat it is: CVE-2026-25679 is a high-severity vulnerability in Golang Go, published on 6 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2026-25679 in the wild and no public exploit code.\n\nAffected packages and fixed versions:\n- golang (Bitnami): affected all versions; fixed in 1.25.8, 1.26.1\n- stdlib (Go): affected all versions; fixed in 1.25.8, 1.26.1\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2026-25679/ (Markdown: https://insights.sbomify.com/CVE-2026-25679/index.md)","id":"CVE-2026-25679","markdown":"https://insights.sbomify.com/CVE-2026-25679/index.md","name":"CVE-2026-25679","record":{"aliases":["ALSA-2026:11412","ALSA-2026:11413","ALSA-2026:13642","ALSA-2026:13643","ALSA-2026:13671","ALSA-2026:19031","ALSA-2026:19032","ALSA-2026:19128","ALSA-2026:6344","ALSA-2026:6382","ALSA-2026:6383","ALSA-2026:6388","ALSA-2026:7005","ALSA-2026:7009","ALSA-2026:7011","ALSA-2026:7259","ALSA-2026:7992","ALSA-2026:8456","ALSA-2026:8840","ALSA-2026:8841","ALSA-2026:9044","AZL-79671","BELL-CVE-2026-25679","BIT-golang-2026-25679","CLEANSTART-2026-DK87563","CLEANSTART-2026-PI22779","CLEANSTART-2026-QY80127","CLEANSTART-2026-RD86654","CLEANSTART-2026-SL87609","CLEANSTART-2026-ST40706","CLEANSTART-2026-TO52151","CLEANSTART-2026-VD32941","CLSA-2026-1774996482","CLSA-2026-1776070934","CLSA-2026-1776336504","CLSA-2026-1776954912","CLSA-2026-1776966842","CLSA-2026-1776968105","CLSA-2026-1777029448","CLSA-2026-1777306907","CLSA-2026-1777445847","CLSA-2026-1778254382","CLSA-2026-1778615531","CLSA-2026-1790241517","DEBIAN-CVE-2026-25679","ECHO-f5e8-7c14-1850","GHSA-j3gx-2473-5fp8","GO-2026-4601","MINI-2285-c85f-85xm","MINI-22xr-p5mw-h2xc","MINI-23rf-w5vg-3g83","MINI-2476-grmj-f545","MINI-2665-28jf-ch7v","MINI-27fc-59j9-2f8g","MINI-2837-prg9-c29g","MINI-29g2-3f79-w2pp","MINI-2cr2-4mjc-cjwj","MINI-2g4f-5rvf-f3f8","MINI-2jcx-h3jm-9jh5","MINI-2jm5-qv2c-27r5","MINI-2m66-f35r-j9p6","MINI-2m6v-f5wr-q9vh","MINI-2qpf-3xph-7c6c","MINI-2r3x-v9cq-fx3w","MINI-2rq3-prv8-q3v3","MINI-2w3c-f68m-fpwj","MINI-2w6v-pm9j-f9jg","MINI-2wwr-2w75-v3p4","MINI-2xcp-8v35-qhrp","MINI-322p-xh9c-m5jr","MINI-34qw-q293-4fff","MINI-373f-62wj-fvw8","MINI-37p3-hwfg-g2wg","MINI-39fr-fhrp-g8gh","MINI-39j3-rxmp-w3g6","MINI-3c5q-5vfc-g5x5","MINI-3cqp-3gxh-vvqf","MINI-3f7m-jrgr-8mvr","MINI-3fch-r3p4-6r73","MINI-3fx8-75f6-g422","MINI-3gh2-h72f-x864","MINI-3gmf-c83q-9hj9","MINI-3hcw-cxm2-3r3q","MINI-3hv6-7g75-x6xh","MINI-3j7h-93c3-8qhf","MINI-3jm5-cr75-rp3w","MINI-3mrg-pgrp-pxh2","MINI-3q6r-q72c-6x24","MINI-3qm2-x8pr-mrrv","MINI-3vvh-55qf-26x5","MINI-3w7j-5772-gc6c","MINI-3x66-hhrr-m56p","MINI-4285-wqgf-7q4j","MINI-43w2-xxmh-hhf4","MINI-454c-6qgh-xm7m","MINI-45gv-qwf4-v287","MINI-46px-65v3-3j55","MINI-4868-4vr9-jxhp","MINI-4889-rr9v-w4q8","MINI-49hv-rqg9-9v6r","MINI-49q5-58mr-6x65","MINI-4cvr-qmhm-m34f","MINI-4g75-787p-9c7c","MINI-4g8v-7xvq-q3h3","MINI-4gx3-rh8r-gvw8","MINI-4jrh-m85h-vjf7","MINI-4q2v-fghg-g6m4","MINI-4rq3-fmcx-9p25","MINI-4rr8-7x9h-9chr","MINI-4rvv-7427-89rw","MINI-4v2x-27p3-ppw3","MINI-4v7w-jvrp-3j3g","MINI-4w5p-jxwx-vpr5","MINI-4wg4-mrxx-37wp","MINI-4xvr-pj5p-98q8","MINI-534w-w38x-h5hc","MINI-53vm-25rj-9g3w","MINI-53xx-8m45-h8v8","MINI-54w5-244j-c3f7","MINI-54w5-248g-vr65","MINI-54wc-52vh-xvw6","MINI-569f-5c6x-p9h5","MINI-56j4-f5w3-ww3m","MINI-56wp-fcpm-8vx7","MINI-56xp-m2mf-7qcw","MINI-5798-rccm-mw23","MINI-5829-qwxw-5cf5","MINI-5846-c8q3-6mg3","MINI-589q-hqc7-p8jq","MINI-596q-xg8m-g646","MINI-5cw8-q5c4-h5qc","MINI-5jgx-73r2-5jfm","MINI-5jqq-4wx2-f2fg","MINI-5mqr-c68j-rf59","MINI-5pcv-8w68-gr2x","MINI-5pj8-vhmv-xx84","MINI-5qwp-q663-xvgw","MINI-5qx4-233p-2g7f","MINI-5v84-77gx-4qqr","MINI-5v89-m4cv-wqpq","MINI-5vm5-pcvf-56wm","MINI-5vwj-w6p6-pvjv","MINI-5w8r-c3g8-pw6q","MINI-5wqr-fpf4-mqjm","MINI-5xjr-jgwv-wwc5","MINI-6262-fwx3-c8xr","MINI-633c-xm93-c9pc","MINI-63f9-gm2v-qh6q","MINI-64g9-5942-xm7h","MINI-6594-8gcc-5m9g","MINI-6745-qvcf-88q9","MINI-6773-gw29-f6cf","MINI-6894-h652-478p","MINI-689f-2xpg-7jqh","MINI-68hg-4fqq-pvf3","MINI-6ccr-gfc5-p8qc","MINI-6cqq-f6mw-7gwr","MINI-6cvm-3mh3-rm7m","MINI-6g8r-gqh5-hcc5","MINI-6gxp-9qw3-2hc6","MINI-6j57-m7c5-2ww6","MINI-6m53-g23f-rjx3","MINI-6pmm-g2g7-vjcx","MINI-6q2f-pghc-9536","MINI-6v85-fxgx-7v45","MINI-6w64-3w28-3642","MINI-6wjx-37j2-f6xx","MINI-6wv3-f75p-hvch","MINI-72hh-qxc3-55j8","MINI-734f-wm6g-m64f","MINI-74fj-2m8w-63vx","MINI-754g-x2p3-pjx6","MINI-75gj-wxrf-727q","MINI-7667-wxj8-p5qp","MINI-767w-ccgf-2p8c","MINI-76hq-jfgm-h2w6","MINI-77hg-qqmx-pvv2","MINI-782x-x693-35x8","MINI-78f3-9486-64q8","MINI-7c43-p6vp-75f7","MINI-7cmj-hx35-rpjw","MINI-7cvf-r3q4-8p8v","MINI-7ffj-q8wm-jwrf","MINI-7fr8-c5c5-mvc9","MINI-7g8p-43cg-2x6h","MINI-7hjg-rv67-67fr","MINI-7j4m-hhmg-x7ph","MINI-7jf5-px4p-wxjx","MINI-7jp3-66r3-7xmw","MINI-7m7j-596x-w3gj","MINI-7pf9-23fc-g8rh","MINI-7pp4-q8g8-8g96","MINI-7q46-7w92-c3c5","MINI-7qw6-mx7f-gqcj","MINI-7r8r-f72q-g9f7","MINI-7r96-489p-wmrg","MINI-7r97-h445-gjpc","MINI-7rp4-f2gf-fp8x","MINI-7w53-xf77-r65w","MINI-7w5f-rffv-9933","MINI-7wgj-8m93-chgq","MINI-7xfv-c78p-hjm6","MINI-84jg-q2rg-p757","MINI-856m-4xj6-hcvx","MINI-85wv-g2c7-q7q8","MINI-88mc-3fvf-f6xp","MINI-8998-9qff-28pf","MINI-8cqv-755g-m23r","MINI-8cr7-53pf-27fv","MINI-8fcm-3gc7-g66f","MINI-8fgc-p5j2-qr45","MINI-8fp5-vh3m-93hv","MINI-8fx6-6cvj-r688","MINI-8j66-xpv5-8hgw","MINI-8jhx-jv6m-f2rc","MINI-8jvp-x9h9-h7p6","MINI-8m4r-v2fv-4w98","MINI-8m53-h736-vgxp","MINI-8qg8-wf36-9hgr","MINI-8qpw-9m58-xwh4","MINI-8r8x-mjq8-qvx2","MINI-8vg2-376c-rphf","MINI-8vq9-mgwx-75pq","MINI-8w9c-g8x6-44xq","MINI-8w9w-v8cp-vwjq","MINI-8wgx-cv3v-ggf4","MINI-8wmr-f6g4-h948","MINI-8wx3-9vcv-hc83","MINI-8x27-wjj9-54g8","MINI-947r-34mp-c9jh","MINI-949q-352c-x9v7","MINI-94m2-4w2x-c5w5","MINI-95f3-jh5g-22cw","MINI-95r3-34w3-w952","MINI-98h6-rcm6-9jp8","MINI-9999-wx86-6chg","MINI-99f6-j8x4-6hm7","MINI-9gcx-3mgf-786w","MINI-9hp5-f8wg-894v","MINI-9hqj-7fhr-g3wv","MINI-9jhp-463r-qffx","MINI-9jm8-fxr9-2qv7","MINI-9jxw-7x63-3fq3","MINI-9pcg-grjw-vjp8","MINI-9qvr-p36w-h799","MINI-9rw2-j6h7-x459","MINI-9v85-295x-r477","MINI-9vp3-v2q9-5vcc","MINI-9vrr-g98q-f423","MINI-9w29-jc8w-54vw","MINI-9wh9-mg4p-846h","MINI-c2cq-c3h2-vj8p","MINI-c2gp-qw5x-8f3m","MINI-c2j5-mpcc-jw59","MINI-c2r6-6gwh-pvvv","MINI-c3qh-8mm6-xxfq","MINI-c42q-5543-7h7c","MINI-c4q7-wg5r-4j4h","MINI-c4wp-c385-3gmf","MINI-c5c3-jq47-5pwr","MINI-c66f-29mm-4cw4","MINI-c68c-4pr4-pc8q","MINI-c7r3-4f32-7x9g","MINI-cffg-j3vg-7rg7","MINI-cfrg-5p54-xq43","MINI-cgx4-6384-629m","MINI-cjqm-9wr2-m82w","MINI-cp29-m77q-86fr","MINI-cp7q-9772-425q","MINI-crrx-wmxx-6p9j","MINI-crx8-hgf9-v994","MINI-cv73-j3px-jp69","MINI-cvfq-fx95-vp2m","MINI-cvm2-8vg3-jhrh","MINI-cvpm-hgm6-j842","MINI-cw26-qpxm-c8ch","MINI-cwqg-2v6x-w9gf","MINI-f2h5-536g-cm8r","MINI-f2vw-m274-g65x","MINI-f39q-x26m-pc4g","MINI-f3cp-ffxj-486p","MINI-f3g4-79pg-qww6","MINI-f69q-3x4m-xwhv","MINI-f6cj-m7r8-vg3c","MINI-f862-qfgr-6rrv","MINI-f89x-f2mp-8m79","MINI-f8ch-hp76-ww77","MINI-f8ph-64mq-x9g3","MINI-fcf2-28v7-q685","MINI-ffv9-6xf9-gpv8","MINI-fg7q-3w54-vjmv","MINI-fggp-45gh-q323","MINI-fgxh-4vmj-j3r3","MINI-fh47-9mrg-f2fw","MINI-fhm4-jrv9-qp5v","MINI-fjjx-gv65-3x32","MINI-fqph-3gjh-9h58","MINI-fqpr-2q42-cwrf","MINI-fqqx-q9f7-7436","MINI-fqrr-wcxw-hq46","MINI-fv98-f3r5-crcr","MINI-fvvv-jmfp-jpm3","MINI-fwf2-7rf8-4737","MINI-fwqp-25c9-f45j","MINI-g27r-vrv8-hr8p","MINI-g2vh-f7v7-g7hh","MINI-g3gf-9223-9hcm","MINI-g44x-6jr4-7xm7","MINI-g4xj-vcvh-727j","MINI-g6fp-hwf7-2vpq","MINI-g84m-822j-854p","MINI-g86h-27vq-cmqf","MINI-g8r2-j88v-j78p","MINI-g97p-7j94-ppgm","MINI-gc8f-55cw-8hrj","MINI-gf3w-wqgq-ccvw","MINI-gfcx-gmjv-24r6","MINI-gg8g-r9ww-j82q","MINI-gghf-p472-wf92","MINI-ggrj-cx65-8r2f","MINI-ghqq-ch9v-fcp7","MINI-ghvh-x5mv-qcqf","MINI-gj5v-w6hq-7jgg","MINI-gmvg-wwgm-2rvw","MINI-gp4j-3qjm-4fm2","MINI-gqvc-52x5-m5m8","MINI-grq5-wfhj-w6w6","MINI-gvhc-rfw8-98j5","MINI-gxcq-3r99-j3fh","MINI-h4xh-3j9r-rhv6","MINI-h5f3-9mm5-h6hg","MINI-h5v6-whv5-6vmx","MINI-h65m-cm52-m7c3","MINI-h7m2-h55f-6qfw","MINI-h7qp-6gf6-g72r","MINI-h99x-g368-mw5c","MINI-hc4c-53rc-jmg9","MINI-hcj5-886f-r8wq","MINI-hcw2-xq69-8qrx","MINI-hg77-2q46-xvwf","MINI-hgmq-9hvm-gf89","MINI-hh6h-6vw4-pw5p","MINI-hj75-pf2h-482p","MINI-hp8h-82fw-r42h","MINI-hqfw-69q8-hq5p","MINI-hqpm-p44g-q6wj","MINI-hqrw-wg2q-7748","MINI-hr56-gqvm-h6p8","MINI-hw42-p376-7v8g","MINI-hx57-qcqf-769g","MINI-j279-mpr6-mcgh","MINI-j2mf-99cp-x9wg","MINI-j2v2-hj8q-h2gp","MINI-j3g2-584c-55g4","MINI-j3xr-3426-mg4x","MINI-j5pj-5pjr-9vw5","MINI-j6hq-236x-28vh","MINI-j9h8-r76h-r6gj","MINI-j9jh-9vwm-j7vp","MINI-jcqj-6v8g-w5xv","MINI-jcx4-rq4j-wp42","MINI-jfg4-6c3f-x494","MINI-jgvc-7h4c-vv2w","MINI-jh3h-9vc6-3v8g","MINI-jh6r-wjfj-wcxp","MINI-jhmm-jw6g-54fr","MINI-jhmp-v9wp-53wp","MINI-jhrg-2pwf-5ch5","MINI-jjfc-75jr-3qh5","MINI-jjv8-3m94-cx8j","MINI-jmgq-wfmv-w9q7","MINI-jp9p-p694-3x89","MINI-jqr8-5hjp-qg3j","MINI-jqvf-49j3-7m44","MINI-jv5r-wfxj-gf65","MINI-jw26-36x5-fg52","MINI-jwhq-g5q2-cpm3","MINI-jxwq-w5mw-68fx","MINI-m23j-gmgj-3vwv","MINI-m345-f9vp-8h95","MINI-m34q-4gxx-qhhh","MINI-m3f7-qvvv-9c55","MINI-m3jw-gpq9-x65x","MINI-m3pf-97fg-5f52","MINI-m3v5-3w96-fx8q","MINI-m3wj-2vpv-97pj","MINI-m3wq-pfj9-x63j","MINI-m5j6-q235-hjmj","MINI-m5pm-rcf7-p8vm","MINI-m6xh-wg33-mh2f","MINI-m7g5-6p52-qqx9","MINI-m7vq-9jqf-gx35","MINI-m83w-4hjh-9mm9","MINI-m8hh-99hh-8vvm","MINI-mcfm-x775-7p23","MINI-mcmw-grv6-fxpp","MINI-mcpj-6j6h-rpq5","MINI-mfqw-6x9g-c8mm","MINI-mg75-6fx8-r28p","MINI-mjmc-8jwm-jpr7","MINI-mmm2-p84h-wmm5","MINI-mpg8-pf7g-pp25","MINI-mq6h-v774-grr3","MINI-mqf9-v9hw-q5rf","MINI-mr27-vh6h-rhr9","MINI-mr95-wg4j-r8hw","MINI-mrg4-3cc3-pjmq","MINI-mvhq-qpjr-qjv9","MINI-mwhg-h3qj-gmcv","MINI-mwjv-fw59-xp55","MINI-mxw8-7ppr-g43r","MINI-p29w-gvrv-xx3x","MINI-p2gx-j74f-m3m5","MINI-p2h8-c238-2v92","MINI-p37c-mxmg-8482","MINI-p3gp-m7hw-vwh8","MINI-p5r2-7w8r-4gxr","MINI-p65h-v565-7ffr","MINI-p9rr-w8h3-gqxr","MINI-pcmv-hpj4-2gvh","MINI-pfc7-jg68-f7jp","MINI-pfcg-279h-g2c9","MINI-pfx6-qhjg-rhqh","MINI-pg4g-779m-8r8g","MINI-phjc-m4jh-5qpp","MINI-phqf-wh3f-j5hf","MINI-pj5r-c9v8-mxfv","MINI-pj8q-4prx-w8fq","MINI-pm7h-c697-qp9j","MINI-pmp8-2fg7-mffq","MINI-pmqm-wqwm-8hw3","MINI-pp8q-6p2x-v65c","MINI-ppwp-ggmh-7v9p","MINI-pr7j-x6hq-rjxq","MINI-pvcm-972c-67rg","MINI-pvfg-675w-h6gh","MINI-pvw8-cw32-pvx9","MINI-pw6m-vj73-x9g2","MINI-pw96-jhff-87pg","MINI-pwgc-2r4x-869c","MINI-q343-r4vr-38m3","MINI-q3pg-whjh-8q6m","MINI-q57c-2vjv-f99x","MINI-q583-xjj7-7vrr","MINI-q5xc-42fw-cxp9","MINI-q6q3-4r95-xw4p","MINI-q7fm-h8fr-g8hw","MINI-q7gw-559h-x48m","MINI-q7xj-v896-c5j9","MINI-q848-2p2c-5258","MINI-q8jj-wpwf-gm2g","MINI-q9cr-4fq3-p4q8","MINI-qcc3-q9m2-hxp5","MINI-qcrp-388q-3239","MINI-qg8v-x4fq-98vm","MINI-qmgj-66ww-776h","MINI-qp6c-9h5f-28xv","MINI-qpvf-9m7r-j6m8","MINI-qq9j-x6g8-r9cp","MINI-qrc7-vj89-9j83","MINI-qrjp-59qc-xcg6","MINI-qv6p-8v2j-x7wc","MINI-qw92-4vm9-x4xm","MINI-qxw9-wwrx-m524","MINI-r3xw-9p9j-qcw9","MINI-r4c7-p699-2w7c","MINI-r57j-jm6g-27jf","MINI-r5gw-6j7w-6w5j","MINI-r5qv-328p-x43x","MINI-r7cq-q984-v5p6","MINI-r8qm-6hpv-wqwp","MINI-rc8q-2jm6-3cw8","MINI-rg83-fpv3-vx4w","MINI-rgf3-wxx4-x57x","MINI-rjx3-p47j-fg4j","MINI-rm5x-xhmv-f622","MINI-rmfg-w446-xf67","MINI-rmgq-mgg4-7qw8","MINI-rmj8-2w3v-2349","MINI-rp56-369q-qh9v","MINI-rqxq-pqmp-g99m","MINI-rrwx-7gjf-2rcq","MINI-rv55-m9jg-q6vc","MINI-rvx5-xvxx-7wgp","MINI-rwj2-c594-4p5m","MINI-rwvc-c6jj-mvvr","MINI-rx7f-xggg-7cv5","MINI-rxpg-v4xv-mwrf","MINI-rxph-www3-6qm2","MINI-rxwh-fv5m-w289","MINI-v38h-qcw4-8jcr","MINI-v85p-8fm6-phfm","MINI-v9wj-3jrr-qqxf","MINI-vf6w-q2vr-qqfj","MINI-vgcf-j9ch-gcmj","MINI-vh7c-p2v7-fr8h","MINI-vhfp-vgpq-f24f","MINI-vhm5-ph2x-ccj8","MINI-vhq6-3vwf-8c3r","MINI-vj3m-3r43-m95j","MINI-vmv2-82gw-hj7x","MINI-vp3c-4gj3-c6m2","MINI-vq6x-7v28-2p22","MINI-vqmf-5fch-3849","MINI-vrwc-96xv-2m6r","MINI-vvpw-g25h-f6fc","MINI-vx39-834j-cjjv","MINI-vxww-jjmx-3j49","MINI-w272-cm63-g552","MINI-w38g-45vw-wmcj","MINI-w3p4-2c57-rwrx","MINI-w3rw-qrcx-vqgf","MINI-w3wm-x6jc-g5gc","MINI-w4j3-46h6-xfcp","MINI-w624-7qwg-mj98","MINI-w6w4-99p7-fq64","MINI-w6xv-p9mp-j9j4","MINI-w78m-36w2-pc64","MINI-w7cj-2cgp-gpc6","MINI-w873-x469-79vg","MINI-w8p4-vqv4-wmw8","MINI-w8q6-ffmv-q2c6","MINI-w8w8-4g8g-xqvv","MINI-w926-2r3g-v6qx","MINI-wc3v-m7m4-cvwh","MINI-wcc8-67fw-frw6","MINI-wcrh-4843-g8xw","MINI-wfxq-vj4f-fhpf","MINI-wg72-34f2-fcrf","MINI-wj47-9j3x-pj99","MINI-wjf5-xj4g-r682","MINI-wm42-782c-wgf8","MINI-wmqc-m326-q4x3","MINI-wpcp-h38g-m4f9","MINI-wpgr-3chj-3gwm","MINI-wq76-h443-6hhj","MINI-wqwf-w5f7-qmpw","MINI-wqwg-pq9p-9w86","MINI-wr8g-gm8w-pg3w","MINI-wv7p-x62j-gm7f","MINI-ww34-c48x-g462","MINI-wwxm-cjhh-7f2q","MINI-wx3r-5g7j-vgww","MINI-x25j-57gm-5mc8","MINI-x2mv-wwjv-r76r","MINI-x2qr-mm97-2p59","MINI-x32f-gpwq-mw7w","MINI-x387-3qp7-q2qm","MINI-x495-ph52-f2rq","MINI-x49w-32g3-xqfw","MINI-x4jj-56rj-9w47","MINI-x4m4-m7gx-7vx6","MINI-x663-v5x3-vj6m","MINI-x6f4-6j7g-gjj8","MINI-x6jx-7rg4-4pmx","MINI-x6xf-rx3j-q8rx","MINI-x8v8-86gv-m29v","MINI-x997-p8rx-j6cr","MINI-x9qj-p3vf-qfjm","MINI-xc4x-7gfm-w9p7","MINI-xc9h-8v3v-7fmv","MINI-xcj2-jpmp-m9xf","MINI-xcm8-8m4r-8x9w","MINI-xcmq-689w-j2hp","MINI-xcq2-qj47-848h","MINI-xf2m-98fx-w5vh","MINI-xgp7-ww64-2m56","MINI-xjh4-35px-ghrq","MINI-xmwq-2rfv-p5wc","MINI-xp9q-qpx2-3449","MINI-xph8-9c96-xw93","MINI-xphm-qvgv-frwx","MINI-xqrh-mg2j-vr24","MINI-xr73-3mx8-fh2w","MINI-xvvh-754x-5vvq","MINI-xwqv-mqpm-jgwx","MINI-xx4p-836r-fj4w","MINI-xxvj-xv4q-936r","RHSA-2026:10133","RHSA-2026:10701","RHSA-2026:10712","RHSA-2026:11375","RHSA-2026:11412","RHSA-2026:11413","RHSA-2026:13642","RHSA-2026:13643","RHSA-2026:13671","RHSA-2026:19026","RHSA-2026:19027","RHSA-2026:19031","RHSA-2026:19032","RHSA-2026:19055","RHSA-2026:19128","RHSA-2026:19184","RHSA-2026:19185","RHSA-2026:20581","RHSA-2026:20582","RHSA-2026:20584","RHSA-2026:22733","RHSA-2026:24386","RHSA-2026:25043","RHSA-2026:26445","RHSA-2026:52389","RHSA-2026:52390","RHSA-2026:52391","RHSA-2026:6344","RHSA-2026:6382","RHSA-2026:6383","RHSA-2026:6388","RHSA-2026:7005","RHSA-2026:7009","RHSA-2026:7011","RHSA-2026:7259","RHSA-2026:7315","RHSA-2026:7328","RHSA-2026:7665","RHSA-2026:7669","RHSA-2026:7674","RHSA-2026:7992","RHSA-2026:81525","RHSA-2026:8314","RHSA-2026:8324","RHSA-2026:8434","RHSA-2026:8456","RHSA-2026:8840","RHSA-2026:8841","RHSA-2026:8845","RHSA-2026:8847","RHSA-2026:8848","RHSA-2026:8849","RHSA-2026:8851","RHSA-2026:8852","RHSA-2026:8853","RHSA-2026:8855","RHSA-2026:8856","RHSA-2026:8860","RHSA-2026:8877","RHSA-2026:8878","RHSA-2026:8879","RHSA-2026:8881","RHSA-2026:8882","RHSA-2026:8930","RHSA-2026:8931","RHSA-2026:8949","RHSA-2026:9043","RHSA-2026:9044","RHSA-2026:9090","RHSA-2026:9093","RHSA-2026:9094","RHSA-2026:9434","RHSA-2026:9435","RHSA-2026:9436","RHSA-2026:9439","RHSA-2026:9695","RLSA-2026:11412","RLSA-2026:11413","RLSA-2026:13642","RLSA-2026:13643","RLSA-2026:13671","RLSA-2026:19031","RLSA-2026:19032","RLSA-2026:19128","RLSA-2026:19184","RLSA-2026:19185","RLSA-2026:6344","RLSA-2026:6382","RLSA-2026:6383","RLSA-2026:6388","RLSA-2026:7005","RLSA-2026:7009","RLSA-2026:7011","RLSA-2026:7259","RLSA-2026:7992","RLSA-2026:8456","RLSA-2026:8840","RLSA-2026:8841","RLSA-2026:9044","UBUNTU-CVE-2026-25679","openSUSE-SU-2026:10578-1","openSUSE-SU-2026:10776-1"],"analysis":{"component_type":"library","fix_type":"upgrade","impacts":["security_bypass"],"network_reachable":"yes","non_default_config":false,"product_category":"Go standard library","requires_auth":"none","summary":"The Go net/url library incorrectly parses IPv6 host literals, potentially allowing security bypasses in applications relying on URL validation.","user_interaction":"not_required","vuln_class":"other"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"Go","cpe":[{"product":"go","vendor":"golang"}],"cvss":{"score":7.5,"severity":"high","source":"cisa-adp","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"cwes":[{"id":"CWE-425","name":"Direct Request"},{"id":"CWE-1286","name":"Improper Validation of Syntactic Correctness of Input"}],"description":"url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.","ecosystems":["AlmaLinux:10","AlmaLinux:8","AlmaLinux:9","Bitnami","Go","Red Hat:enterprise_linux:10.1","Red Hat:enterprise_linux:10.2","Red Hat:enterprise_linux:8::appstream","Red Hat:enterprise_linux:9::appstream","Red Hat:enterprise_linux:9::crb","Red Hat:enterprise_linux_eus:10.0","Red Hat:hummingbird:1","Red Hat:openshift:4.16::el8","Red Hat:openshift:4.16::el9","Red Hat:rhel_aus:8.2::appstream","Red Hat:rhel_aus:8.4::appstream","Red Hat:rhel_aus:8.6::appstream","Red Hat:rhel_e4s:8.6::appstream","Red Hat:rhel_e4s:8.8::appstream","Red Hat:rhel_e4s:9.0::appstream","Red Hat:rhel_e4s:9.2::appstream","Red Hat:rhel_e4s:9.4::appstream","Red Hat:rhel_els:7","Red Hat:rhel_eus:9.4::appstream","Red Hat:rhel_eus:9.4::crb","Red Hat:rhel_eus:9.6::appstream","Red Hat:rhel_eus:9.6::crb","Red Hat:rhel_eus_long_life:8.4::appstream","Red Hat:rhel_eus_long_life:8.6::appstream","Red Hat:rhel_tus:8.6::appstream","Red Hat:rhel_tus:8.8::appstream","Rocky Linux:10","Rocky Linux:8","Rocky Linux:9","openSUSE:Tumbleweed"],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"Incorrect parsing of IPv6 host literals in net/url","id":"CVE-2026-25679","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":"Bitnami","product":"golang:go","products":["golang:go"],"type":"other","year":"2026"},"n_packages":446,"n_references":4,"next":{"headline":"Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html","id":"CVE-2026-25680"},"packages":[{"ecosystem":"Bitnami","fixed":["1.25.8","1.26.1"],"introduced":["0","1.26.0-0"],"last_affected":[],"package":"golang","purl":"pkg:bitnami/golang","source":"BIT-golang-2026-25679"},{"ecosystem":"Go","fixed":["1.25.8","1.26.1"],"introduced":["0","1.26.0-0"],"last_affected":[],"package":"stdlib","purl":"pkg:golang/stdlib","source":"GO-2026-4601"},{"ecosystem":"AlmaLinux:10","fixed":["2:1.43.1-1.el10_2"],"introduced":["0"],"last_affected":[],"package":"buildah","purl":"pkg:rpm/almalinux/buildah","source":"ALSA-2026:19032"},{"ecosystem":"AlmaLinux:10","fixed":["2:1.43.1-1.el10_2"],"introduced":["0"],"last_affected":[],"package":"buildah-tests","purl":"pkg:rpm/almalinux/buildah-tests","source":"ALSA-2026:19032"},{"ecosystem":"AlmaLinux:10","fixed":["3.6.1-8.el10_1"],"introduced":["0"],"last_affected":[],"package":"git-lfs","purl":"pkg:rpm/almalinux/git-lfs","source":"ALSA-2026:7005"},{"ecosystem":"AlmaLinux:10","fixed":["3.6.0-8.el10_1"],"introduced":["0"],"last_affected":[],"package":"go-srpm-macros","purl":"pkg:rpm/almalinux/go-srpm-macros","source":"ALSA-2026:8840"},{"ecosystem":"AlmaLinux:10","fixed":["10.2.6-23.el10_1"],"introduced":["0"],"last_affected":[],"package":"grafana","purl":"pkg:rpm/almalinux/grafana","source":"ALSA-2026:6344"},{"ecosystem":"AlmaLinux:10","fixed":["5.3.0-3.el10_1"],"introduced":["0"],"last_affected":[],"package":"grafana-pcp","purl":"pkg:rpm/almalinux/grafana-pcp","source":"ALSA-2026:6388"},{"ecosystem":"AlmaLinux:10","fixed":["10.2.6-23.el10_1"],"introduced":["0"],"last_affected":[],"package":"grafana-selinux","purl":"pkg:rpm/almalinux/grafana-selinux","source":"ALSA-2026:6344"},{"ecosystem":"AlmaLinux:10","fixed":["31-5.el10_1"],"introduced":["0"],"last_affected":[],"package":"image-builder","purl":"pkg:rpm/almalinux/image-builder","source":"ALSA-2026:13642"},{"ecosystem":"AlmaLinux:10","fixed":["0.9.27-5.el10_1.1"],"introduced":["0"],"last_affected":[],"package":"ipp-usb","purl":"pkg:rpm/almalinux/ipp-usb","source":"ALSA-2026:7992"},{"ecosystem":"AlmaLinux:10","fixed":["149-6.el10_1.alma.3"],"introduced":["0"],"last_affected":[],"package":"osbuild-composer","purl":"pkg:rpm/almalinux/osbuild-composer","source":"ALSA-2026:13643"},{"ecosystem":"AlmaLinux:10","fixed":["149-6.el10_1.alma.3"],"introduced":["0"],"last_affected":[],"package":"osbuild-composer-core","purl":"pkg:rpm/almalinux/osbuild-composer-core","source":"ALSA-2026:13643"},{"ecosystem":"AlmaLinux:10","fixed":["149-6.el10_1.alma.3"],"introduced":["0"],"last_affected":[],"package":"osbuild-composer-worker","purl":"pkg:rpm/almalinux/osbuild-composer-worker","source":"ALSA-2026:13643"},{"ecosystem":"AlmaLinux:10","fixed":["2:1.22.2-1.el10_2"],"introduced":["0"],"last_affected":[],"package":"skopeo","purl":"pkg:rpm/almalinux/skopeo","source":"ALSA-2026:19031"},{"ecosystem":"AlmaLinux:10","fixed":["2:1.22.2-1.el10_2"],"introduced":["0"],"last_affected":[],"package":"skopeo-tests","purl":"pkg:rpm/almalinux/skopeo-tests","source":"ALSA-2026:19031"},{"ecosystem":"AlmaLinux:10","fixed":["0.4.8-4.el10_1"],"introduced":["0"],"last_affected":[],"package":"yggdrasil","purl":"pkg:rpm/almalinux/yggdrasil","source":"ALSA-2026:11413"},{"ecosystem":"AlmaLinux:10","fixed":["0.4.8-4.el10_1"],"introduced":["0"],"last_affected":[],"package":"yggdrasil-devel","purl":"pkg:rpm/almalinux/yggdrasil-devel","source":"ALSA-2026:11413"},{"ecosystem":"AlmaLinux:10","fixed":["0.2.3-5.el10_1"],"introduced":["0"],"last_affected":[],"package":"yggdrasil-worker-package-manager","purl":"pkg:rpm/almalinux/yggdrasil-worker-package-manager","source":"ALSA-2026:11412"},{"ecosystem":"AlmaLinux:10","fixed":["0.2.3-6.el10_2"],"introduced":["0"],"last_affected":[],"package":"yggdrasil-worker-package-manager","purl":"pkg:rpm/almalinux/yggdrasil-worker-package-manager","source":"ALSA-2026:19128"},{"ecosystem":"AlmaLinux:8","fixed":["9.2.10-29.el8_10"],"introduced":["0"],"last_affected":[],"package":"grafana","purl":"pkg:rpm/almalinux/grafana","source":"ALSA-2026:7011"},{"ecosystem":"AlmaLinux:8","fixed":["5.1.1-13.el8_10"],"introduced":["0"],"last_affected":[],"package":"grafana-pcp","purl":"pkg:rpm/almalinux/grafana-pcp","source":"ALSA-2026:7009"},{"ecosystem":"AlmaLinux:8","fixed":["9.2.10-29.el8_10"],"introduced":["0"],"last_affected":[],"package":"grafana-selinux","purl":"pkg:rpm/almalinux/grafana-selinux","source":"ALSA-2026:7011"},{"ecosystem":"AlmaLinux:8","fixed":["101.4-5.el8_10.alma.1"],"introduced":["0"],"last_affected":[],"package":"osbuild-composer","purl":"pkg:rpm/almalinux/osbuild-composer","source":"ALSA-2026:8456"},{"ecosystem":"AlmaLinux:8","fixed":["101.4-5.el8_10.alma.1"],"introduced":["0"],"last_affected":[],"package":"osbuild-composer-core","purl":"pkg:rpm/almalinux/osbuild-composer-core","source":"ALSA-2026:8456"},{"ecosystem":"AlmaLinux:8","fixed":["101.4-5.el8_10.alma.1"],"introduced":["0"],"last_affected":[],"package":"osbuild-composer-worker","purl":"pkg:rpm/almalinux/osbuild-composer-worker","source":"ALSA-2026:8456"},{"ecosystem":"AlmaLinux:9","fixed":["3.6.1-8.el9_7"],"introduced":["0"],"last_affected":[],"package":"git-lfs","purl":"pkg:rpm/almalinux/git-lfs","source":"ALSA-2026:7259"},{"ecosystem":"AlmaLinux:9","fixed":["3.6.0-14.el9_7"],"introduced":["0"],"last_affected":[],"package":"go-filesystem","purl":"pkg:rpm/almalinux/go-filesystem","source":"ALSA-2026:8841"},{"ecosystem":"AlmaLinux:9","fixed":["3.6.0-14.el9_7"],"introduced":["0"],"last_affected":[],"package":"go-rpm-macros","purl":"pkg:rpm/almalinux/go-rpm-macros","source":"ALSA-2026:8841"},{"ecosystem":"AlmaLinux:9","fixed":["3.6.0-14.el9_7"],"introduced":["0"],"last_affected":[],"package":"go-rpm-templates","purl":"pkg:rpm/almalinux/go-rpm-templates","source":"ALSA-2026:8841"},{"ecosystem":"AlmaLinux:9","fixed":["3.6.0-14.el9_7"],"introduced":["0"],"last_affected":[],"package":"go-srpm-macros","purl":"pkg:rpm/almalinux/go-srpm-macros","source":"ALSA-2026:8841"},{"ecosystem":"AlmaLinux:9","fixed":["10.2.6-19.el9_7"],"introduced":["0"],"last_affected":[],"package":"grafana","purl":"pkg:rpm/almalinux/grafana","source":"ALSA-2026:6382"},{"ecosystem":"AlmaLinux:9","fixed":["5.1.1-13.el9_7"],"introduced":["0"],"last_affected":[],"package":"grafana-pcp","purl":"pkg:rpm/almalinux/grafana-pcp","source":"ALSA-2026:6383"},{"ecosystem":"AlmaLinux:9","fixed":["10.2.6-19.el9_7"],"introduced":["0"],"last_affected":[],"package":"grafana-selinux","purl":"pkg:rpm/almalinux/grafana-selinux","source":"ALSA-2026:6382"},{"ecosystem":"AlmaLinux:9","fixed":["31-4.el9_7"],"introduced":["0"],"last_affected":[],"package":"image-builder","purl":"pkg:rpm/almalinux/image-builder","source":"ALSA-2026:13671"},{"ecosystem":"AlmaLinux:9","fixed":["149-5.el9_7.alma.3"],"introduced":["0"],"last_affected":[],"package":"osbuild-composer","purl":"pkg:rpm/almalinux/osbuild-composer","source":"ALSA-2026:9044"},{"ecosystem":"AlmaLinux:9","fixed":["149-5.el9_7.alma.3"],"introduced":["0"],"last_affected":[],"package":"osbuild-composer-core","purl":"pkg:rpm/almalinux/osbuild-composer-core","source":"ALSA-2026:9044"},{"ecosystem":"AlmaLinux:9","fixed":["149-5.el9_7.alma.3"],"introduced":["0"],"last_affected":[],"package":"osbuild-composer-worker","purl":"pkg:rpm/almalinux/osbuild-composer-worker","source":"ALSA-2026:9044"},{"ecosystem":"Red Hat:enterprise_linux:10.1","fixed":["0:3.6.1-8.el10_1"],"introduced":["0"],"last_affected":[],"package":"git-lfs","purl":"pkg:rpm/redhat/git-lfs","source":"RHSA-2026:7005"},{"ecosystem":"Red Hat:enterprise_linux:10.1","fixed":["0:3.6.1-8.el10_1"],"introduced":["0"],"last_affected":[],"package":"git-lfs-debuginfo","purl":"pkg:rpm/redhat/git-lfs-debuginfo","source":"RHSA-2026:7005"}],"prev":{"headline":"Other in M-Track Duo HD","id":"CVE-2026-25676"},"products":["net/url"],"published":"2026-03-06","related":[{"cvss_score":8.1,"headline":"Microsoft Windows CryptoAPI Spoofing","id":"CVE-2020-0601","kev_date_added":"2021-11-03","published":"2020-01-14"},{"cvss_score":9.8,"headline":"Missing bound checks can lead to memory corruption in safe Go in cmd/compile","id":"CVE-2026-27143","kev_date_added":null,"published":"2026-04-08"},{"cvss_score":9.8,"headline":"Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip","id":"CVE-2024-24790","kev_date_added":null,"published":"2024-06-05"},{"cvss_score":9.8,"headline":"Arbitrary code execution via go.mod toolchain directive in cmd/go","id":"CVE-2023-39320","kev_date_added":null,"published":"2023-09-08"},{"cvss_score":9.8,"headline":"Improper handling of JavaScript whitespace in html/template","id":"CVE-2023-24540","kev_date_added":null,"published":"2023-05-11"},{"cvss_score":9.8,"headline":"Backticks not treated as string delimiters in html/template","id":"CVE-2023-24538","kev_date_added":null,"published":"2023-04-06"},{"cvss_score":9.8,"headline":"Other in go/golang","id":"CVE-2012-2666","kev_date_added":null,"published":"2021-07-09"}],"sources":[{"class":"attribution","licence":"MIT","name":"AlmaLinux","prefix":"ALSA"},{"class":"attribution","licence":"Apache-2.0","name":"Bitnami","prefix":"BIT"},{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CC BY 4.0","name":"Go Vulnerability Database","prefix":"GO"},{"class":"attribution","licence":"CC BY 4.0","name":"Red Hat","prefix":"RHSA"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"yes","exploitation":"none","technical_impact":"partial"},"state":"PUBLISHED","updated":"2026-09-18","vendors":["Go standard library"]},"summary":"The Go net/url library incorrectly parses IPv6 host literals, potentially allowing security bypasses in applications relying on URL validation.","url":"https://insights.sbomify.com/CVE-2026-25679/"}