Debian/golang-1.24: medium 4.4
Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1
Action: Upgrade golang-1.24 to 1.24.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.24.1-1 | - |
Fixed versions
| 1.24.1-1 |
Sources
- osv: DEBIAN-CVE-2025-22870#Debian:13/golang-1.24
- https://security-tracker.debian.org/tracker/CVE-2025-22870
published · modified · JSON