VDB
BIT-golang-2025-61726
BIT-golang-2025-61726
PUBLISHED
CVSS 7.5 HIGH
Memory exhaustion in query parameter parsing in net/url
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | golang | 0, 1.25.0, 0 |
Timeline
- Jan 31, 2026 CVE Published
- Jul 29, 2026 CVE Updated
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
- Aug 8, 2026 Distribution Patch
References
- https://go.dev/cl/736712 url
- https://go.dev/issue/77101 url
- https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc url
- https://nvd.nist.gov/vuln/detail/CVE-2025-61726 url
- https://pkg.go.dev/vuln/GO-2026-4341 url
- https://access.redhat.com/errata/RHSA-2026:10096 url
- https://access.redhat.com/errata/RHSA-2026:10104 url
- https://access.redhat.com/errata/RHSA-2026:10184 url
- https://access.redhat.com/errata/RHSA-2026:10225 url
- https://access.redhat.com/errata/RHSA-2026:10250 url
- https://access.redhat.com/errata/RHSA-2026:11408 url
- https://access.redhat.com/errata/RHSA-2026:11414 url
- https://access.redhat.com/errata/RHSA-2026:11747 url
- https://access.redhat.com/errata/RHSA-2026:11749 url
- https://access.redhat.com/errata/RHSA-2026:12028 url
- https://access.redhat.com/errata/RHSA-2026:12029 url
- https://access.redhat.com/errata/RHSA-2026:12030 url
- https://access.redhat.com/errata/RHSA-2026:12031 url
- https://access.redhat.com/errata/RHSA-2026:12032 url
- https://access.redhat.com/errata/RHSA-2026:12033 url
…and 261 more