CVE-2026-25679

HIGH 7.5

Incorrect parsing of IPv6 host literals in net/url

CVSS Score

7.5

EPSS Score

0.0%

EPSS Percentile

0th

url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.

Vendor	go standard library
Product	net/url
Published	Mar 6, 2026
Last Updated	Jul 24, 2026

Stay Ahead of the Next One

Get instant alerts for go standard library net/url

Be the first to know when new high vulnerabilities affecting go standard library net/url are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Go standard library / net/url

0 < 1.25.8 1.26.0-0 < 1.26.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

go.dev: https://go.dev/cl/752180 go.dev: https://go.dev/issue/77578 groups.google.com: https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk pkg.go.dev: https://pkg.go.dev/vuln/GO-2026-4601 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-25679 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2445356 security.access.redhat.com: https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25679.json access.redhat.com: https://access.redhat.com/errata/RHSA-2026:13508 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:41019 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8855 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:13512 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:26527 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:26541 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:28886 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:28961 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:25043 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:34097 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21655 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:25180 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:27076 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:6341 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36796 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:28047 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:39810 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42150 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42151 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:34365 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:14868 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8314 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9435 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8856 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:5943 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10133 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8849 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8931 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:17084 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19719 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19750 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:17040 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:7328 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10929 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16696 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11375 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10701 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8842 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:7005 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8840 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:5941 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:7992 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:6344 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:6388 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:13642 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:13643 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:7669 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10169 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11413 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11412 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19032 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:29195 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19133 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19022 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19027 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19026 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22937 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19049 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19135 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22450 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19017 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:24386 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19055 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19132 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19031 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:29035 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19126 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19128 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:33722 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:6949 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16875 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:7011 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:7009 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8456 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:7674 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:7878 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8853 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:7879 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20581 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9043 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9094 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8434 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19634 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:7876 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20582 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8860 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9093 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8851 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:7877 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20584 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8877 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8878 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9695 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16102 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9436 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:7883 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8881 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8949 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8852 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:25252 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:25251 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9434 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:7833 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8879 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9090 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:25248 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8322 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:25253 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:25250 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22733 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:12030 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:12032 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10712 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:7834 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8930 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8882 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:12033 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19721 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:12028 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8324 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:12031 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:12029 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11749 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9109 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9439 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8848 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:5944 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8847 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8845 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9108 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19720 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19475 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:17287 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:7665 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9097 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9098 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:7259 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8841 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:5942 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:6382 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:6383 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:13671 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9044 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:7315 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:29455 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:29703 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19350 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19181 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19185 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19184 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:23228 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19353 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22714 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:26445 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19207 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:29702 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36317 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:5549 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8433 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22627 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:26636 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9872 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22862 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:26585 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11800 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22423 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22347 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:5110 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21769 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:23345 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16874 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:29854 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:26568 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:25127 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8151 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11217 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:13791 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36319 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:13829 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20889 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:13545 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9742 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:6802 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36651 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:40945 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:40118 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10140 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10141 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:7385 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:7291 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9052 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:41928 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10184 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10158 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:12282 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21696 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:14100 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21691 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:15091 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:28893 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:14774 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20088 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:17598 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21657 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20041 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:6564 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10175 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11688 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8483 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11686 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9440 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8484 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9448 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8490 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9453 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8491 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9461 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8493 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9385 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11747 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:6720 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11856 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21017 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:24853 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19375 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11916 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11996 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:14879 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10125 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10065 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11768 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10250 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10225 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8338 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8337 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8167 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:14020 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:28441

Credits

Masaki Hara (https://github.com/qnighy) of Wantedly