AZL-79671

Import Source

JSON Data

https://api.osv.dev/v1/vulns/AZL-79671

Upstream

Published

2026-03-06T22:16:00Z

Modified

2026-08-30T05:26:50Z

Summary

CVE-2026-25679 affecting package golang for versions less than 1.2.58-1

Details

url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.58-1

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-79671.json"