Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL
Details
CVE-2025-47912 affects multiple packages. The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. See references for individual vulnerability details.