VDB
GO-2025-3420
GO-2025-3420
PUBLISHED
Sensitive headers incorrectly sent after cross-domain redirect in net/http
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | hey | 0 |
| wolfi | docker-credential-gcr | 0 |
| wolfi | crossplane-provider-sql | 0 |
| chainguard | karpenter-0.35 | 0 |
| wolfi | metrics-server | 0 |
| chainguard | gitea-fips | 0 |
| chainguard | volume-modifier-for-k8s | 0 |
| chainguard | multus-cni-fips-4.0.2 | 0 |
| wolfi | kube-state-metrics | 0 |
| chainguard | cloud-provider-azure-fips-1.28 | 0 |
| wolfi | harbor-cli | 0 |
| chainguard | external-secrets-fips | 0 |
| wolfi | kubernetes-1.30 | 0 |
| chainguard | cloud-provider-azure-1.32 | 0 |
| wolfi | kubewatch | 0 |
| chainguard | kafka_exporter | 0 |
| chainguard | thanos-operator | 0 |
| wolfi | kubernetes-csi-external-resizer | 0 |
| chainguard | cloud-provider-azure-1.31 | 0 |
| chainguard | x509-certificate-exporter-fips | 0 |
…and 986 more
Timeline
- Jan 28, 2025 CVE Published
- Feb 17, 2026 CVE Updated