CVE-2025-47912 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresse…
Medium CVSS: 5.3

CVE-2025-47912

The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: "http://[::1]/". IPv4 addresses and hostnames must not appear within square brackets. Parse did not enforce this requirement.
Vendor
Golang
Product
Go
CWE
NVD-CWE-noinfo
Yayın Tarihi
2025-10-29 23:16:18
Güncelleme
2026-01-29 13:57:18
Source Identifier
security@golang.org
KEV Date Added
-

Kategoriler

NVD-CWE-noinfo Go MEDIUM Golang 2025

Referanslar

https://go.dev/cl/709857 https://go.dev/issue/75678 https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI https://pkg.go.dev/vuln/GO-2025-4010 http://www.openwall.com/lists/oss-security/2025/10/08/1