VDB
GO-2025-3503
GO-2025-3503
PUBLISHED
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | kserve | 0 |
| chainguard | spire-controller-manager-fips | 0 |
| wolfi | multus-cni | 0 |
| chainguard | k6 | 0 |
| chainguard | flux-fips-2.4 | 0 |
| wolfi | cloud-provider-gcp-cloud-controller-manager | 0 |
| chainguard | helm-operator-fips | 0 |
| chainguard | cloudnative-pg-fips | 0 |
| chainguard | containerd-2 | 0 |
| chainguard | opentelemetry-collector-fips | 0 |
| chainguard | tekton-chains-fips | 0 |
| wolfi | restic | 0, 0, 0 |
| chainguard | cloud-provider-aws-1.30 | 0, 0, 0 |
| chainguard | argo-cd-2.13 | 0, 0, 0 |
| chainguard | op-geth | 0, 0, 0 |
| chainguard | karpenter-fips-1.1 | 0, 0, 0 |
| wolfi | spire-server | 0, 0, 0 |
| wolfi | cert-exporter | 0, 0, 0 |
| chainguard | actions-runner-controller | 0, 0, 0 |
| chainguard | terraform-provider-google | 0, 0, 0 |
…and 1171 more
Timeline
- Mar 12, 2025 CVE Published
- Apr 16, 2026 CVE Updated