Vulnerability · Published Jan 28, 2026 · Assigned by Go
CVE-2025-61726Memory exhaustion in query parameter parsing in net/url
High 7.5
In plain English
A high-severity resource allocation without limits in net/url from Go standard library. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.3% (higher than 83% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)2.3%top 16.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encoded forms. Parsing a large form containing many unique query parameters can cause excessive memory consumption.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:4672 |
| AlmaLinux:8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+4089+ce72bbbe | ALSA-2026:4672 |
| AlmaLinux:8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+4047+545787c4 | ALSA-2026:4672 |
| AlmaLinux:8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:4672 |
| AlmaLinux:10 | buildah | 2:1.41.8-2.el10_1 | ALSA-2026:3297 |
| AlmaLinux:8 | buildah | 2:1.33.14-3.module_el8.10.0+4136+16425343 | ALSA-2026:4672 |
| AlmaLinux:9 | buildah | 2:1.41.8-2.el9_7 | ALSA-2026:3298 |
| AlmaLinux:10 | buildah-tests | 2:1.41.8-2.el10_1 | ALSA-2026:3297 |
| AlmaLinux:8 | buildah-tests | 2:1.33.14-3.module_el8.10.0+4136+16425343 | ALSA-2026:4672 |
| AlmaLinux:9 | buildah-tests | 2:1.41.8-2.el9_7 | ALSA-2026:3298 |
| AlmaLinux:8 | cockpit-podman | 84.1-1.module_el8.10.0+4102+6c76e544 | ALSA-2026:4672 |
| AlmaLinux:8 | conmon | 3:2.1.10-1.module_el8.10.0+3970+8445edf6 | ALSA-2026:4672 |
| AlmaLinux:8 | conmon | 3:2.1.10-1.module_el8.10.0+4090+91932338 | ALSA-2026:4672 |
| AlmaLinux:8 | conmon | 3:2.1.10-1.module_el8.10.0+4068+0e21408f | ALSA-2026:4672 |
| AlmaLinux:8 | container-selinux | 2:2.229.0-2.module_el8.10.0+4090+91932338 | ALSA-2026:4672 |
| AlmaLinux:8 | containernetworking-plugins | 1:1.4.0-8.module_el8.10.0+4136+16425343 | ALSA-2026:4672 |
| AlmaLinux:9 | containernetworking-plugins | 1:1.7.1-3.el9_7 | ALSA-2026:3341 |
| AlmaLinux:9 | containernetworking-plugins | 1:1.9.0-2.el9 | ALSA-2026:18913 |
| AlmaLinux:8 | containers-common | 2:1-82.module_el8.10.0+4089+ce72bbbe | ALSA-2026:4672 |
| AlmaLinux:8 | containers-common | 2:1-82.module_el8.10.0+3876+e55593a8 | ALSA-2026:4672 |
| AlmaLinux:8 | containers-common | 2:1-82.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:4672 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+3845+87b84552 | ALSA-2026:4672 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+4120+03ad4b47 | ALSA-2026:4672 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:4672 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+4047+545787c4 | ALSA-2026:4672 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+4120+03ad4b47 | ALSA-2026:4672 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+4089+ce72bbbe | ALSA-2026:4672 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:4672 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+3876+e55593a8 | ALSA-2026:4672 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+3858+6ad51f9f | ALSA-2026:4672 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+4016+efd18bf8 | ALSA-2026:4672 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+4089+ce72bbbe | ALSA-2026:4672 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+4068+0e21408f | ALSA-2026:4672 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:4672 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+4082+f7f0c95e | ALSA-2026:4672 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+3926+f12484f5 | ALSA-2026:4672 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+3970+8445edf6 | ALSA-2026:4672 |
| AlmaLinux:8 | crun | 1.14.3-2.module_el8.10.0+4120+03ad4b47 | ALSA-2026:4672 |
| AlmaLinux:8 | crun | 1.14.3-2.module_el8.10.0+4102+6c76e544 | ALSA-2026:4672 |
| AlmaLinux:8 | crun | 1.14.3-2.module_el8.10.0+4082+f7f0c95e | ALSA-2026:4672 |
| AlmaLinux:10 | delve | 1.25.2-2.el10_1 | ALSA-2026:3864 |
| AlmaLinux:10 | delve | 1.26.1-1.el10_2 | ALSA-2026:19013 |
| AlmaLinux:8 | delve | 1.25.2-1.module_el8.10.0+4074+24330916 | ALSA-2026:2708 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+3792+03eaed9c | ALSA-2026:4672 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+4068+0e21408f | ALSA-2026:4672 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+4047+545787c4 | ALSA-2026:4672 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+4082+f7f0c95e | ALSA-2026:4672 |
| AlmaLinux:10 | git-lfs | 3.6.1-7.el10_1 | ALSA-2026:4164 |
| AlmaLinux:8 | git-lfs | 3.4.1-8.el8_10 | ALSA-2026:3985 |
| AlmaLinux:9 | git-lfs | 3.6.1-7.el9_7 | ALSA-2026:3928 |
| AlmaLinux:9 | go-filesystem | 3.6.0-13.el9_7 | ALSA-2026:3668 |
| AlmaLinux:9 | go-rpm-macros | 3.6.0-13.el9_7 | ALSA-2026:3668 |
| AlmaLinux:9 | go-rpm-templates | 3.6.0-13.el9_7 | ALSA-2026:3668 |
| AlmaLinux:10 | go-srpm-macros | 3.6.0-7.el10_1 | ALSA-2026:3669 |
| AlmaLinux:9 | go-srpm-macros | 3.6.0-13.el9_7 | ALSA-2026:3668 |
| AlmaLinux:8 | go-toolset | 1.25.7-1.module_el8.10.0+4117+b694c6c9 | ALSA-2026:2708 |
| AlmaLinux:9 | go-toolset | 1.25.7-1.el9_7 | ALSA-2026:2709 |
| AlmaLinux:8 | golang | 1.25.7-1.module_el8.10.0+4117+b694c6c9 | ALSA-2026:2708 |
| AlmaLinux:9 | golang | 1.25.7-1.el9_7 | ALSA-2026:2709 |
| AlmaLinux:8 | golang-bin | 1.25.7-1.module_el8.10.0+4117+b694c6c9 | ALSA-2026:2708 |
| AlmaLinux:9 | golang-bin | 1.25.7-1.el9_7 | ALSA-2026:2709 |
| AlmaLinux:10 | golang-docs | 1.25.7-1.el10_1.alma.1 | ALSA-2026:2706 |
| AlmaLinux:8 | golang-docs | 1.25.7-1.module_el8.10.0+4117+b694c6c9 | ALSA-2026:2708 |
| AlmaLinux:9 | golang-docs | 1.25.7-1.el9_7 | ALSA-2026:2709 |
| AlmaLinux:10 | golang-misc | 1.25.7-1.el10_1.alma.1 | ALSA-2026:2706 |
| AlmaLinux:8 | golang-misc | 1.25.7-1.module_el8.10.0+4117+b694c6c9 | ALSA-2026:2708 |
| AlmaLinux:9 | golang-misc | 1.25.7-1.el9_7 | ALSA-2026:2709 |
| AlmaLinux:8 | golang-race | 1.25.7-1.module_el8.10.0+4117+b694c6c9 | ALSA-2026:2708 |
| AlmaLinux:9 | golang-race | 1.25.7-1.el9_7 | ALSA-2026:2709 |
| AlmaLinux:10 | golang-src | 1.25.7-1.el10_1.alma.1 | ALSA-2026:2706 |
| AlmaLinux:8 | golang-src | 1.25.7-1.module_el8.10.0+4117+b694c6c9 | ALSA-2026:2708 |
| AlmaLinux:9 | golang-src | 1.25.7-1.el9_7 | ALSA-2026:2709 |
| AlmaLinux:10 | golang-tests | 1.25.7-1.el10_1.alma.1 | ALSA-2026:2706 |
| AlmaLinux:8 | golang-tests | 1.25.7-1.module_el8.10.0+4117+b694c6c9 | ALSA-2026:2708 |
| AlmaLinux:9 | golang-tests | 1.25.7-1.el9_7 | ALSA-2026:2709 |
| AlmaLinux:10 | grafana | 10.2.6-22.el10_1 | ALSA-2026:2914 |
| AlmaLinux:8 | grafana | 9.2.10-28.el8_10 | ALSA-2026:3188 |
| AlmaLinux:9 | grafana | 10.2.6-18.el9_7 | ALSA-2026:2920 |
| AlmaLinux:10 | grafana-pcp | 5.3.0-2.el10_1 | ALSA-2026:3035 |
| AlmaLinux:8 | grafana-pcp | 5.1.1-12.el8_10 | ALSA-2026:3187 |
| AlmaLinux:9 | grafana-pcp | 5.1.1-12.el9_7 | ALSA-2026:3040 |
| AlmaLinux:10 | grafana-selinux | 10.2.6-22.el10_1 | ALSA-2026:2914 |
| AlmaLinux:8 | grafana-selinux | 9.2.10-28.el8_10 | ALSA-2026:3188 |
| AlmaLinux:9 | grafana-selinux | 10.2.6-18.el9_7 | ALSA-2026:2920 |
| AlmaLinux:10 | image-builder | 31-4.el10_1 | ALSA-2026:3840 |
| AlmaLinux:9 | image-builder | 31-3.el9_7 | ALSA-2026:3839 |
| AlmaLinux:10 | ipp-usb | 0.9.27-5.el10_1 | ALSA-2026:3092 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+4023+db236c53 | ALSA-2026:4672 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+4090+91932338 | ALSA-2026:4672 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+4089+ce72bbbe | ALSA-2026:4672 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+4120+03ad4b47 | ALSA-2026:4672 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+4102+6c76e544 | ALSA-2026:4672 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+4068+0e21408f | ALSA-2026:4672 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+3970+8445edf6 | ALSA-2026:4672 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+4082+f7f0c95e | ALSA-2026:4672 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:4672 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+4023+db236c53 | ALSA-2026:4672 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+3970+8445edf6 | ALSA-2026:4672 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+4082+f7f0c95e | ALSA-2026:4672 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+4068+0e21408f | ALSA-2026:4672 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+4047+545787c4 | ALSA-2026:4672 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:4672 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:4672 |
| AlmaLinux:10 | opentelemetry-collector | 0.144.0-1.el10_1 | ALSA-2026:4174 |
| AlmaLinux:9 | opentelemetry-collector | 0.144.0-1.el9_7 | ALSA-2026:4177 |
| AlmaLinux:10 | osbuild-composer | 149-5.el10_1.alma.3 | ALSA-2026:3752 |
| AlmaLinux:8 | osbuild-composer | 101.4-4.el8_10.alma.1 | ALSA-2026:3898 |
| AlmaLinux:9 | osbuild-composer | 149-4.el9_7.alma.3 | ALSA-2026:3753 |
| AlmaLinux:10 | osbuild-composer-core | 149-5.el10_1.alma.3 | ALSA-2026:3752 |
| AlmaLinux:8 | osbuild-composer-core | 101.4-4.el8_10.alma.1 | ALSA-2026:3898 |
| AlmaLinux:9 | osbuild-composer-core | 149-4.el9_7.alma.3 | ALSA-2026:3753 |
| AlmaLinux:10 | osbuild-composer-worker | 149-5.el10_1.alma.3 | ALSA-2026:3752 |
| AlmaLinux:8 | osbuild-composer-worker | 101.4-4.el8_10.alma.1 | ALSA-2026:3898 |
| AlmaLinux:9 | osbuild-composer-worker | 149-4.el9_7.alma.3 | ALSA-2026:3753 |
| AlmaLinux:8 | podman | 4:4.9.4-30.module_el8.10.0+4136+16425343 | ALSA-2026:4672 |
| AlmaLinux:9 | podman | 6:5.6.0-14.el9_7 | ALSA-2026:3337 |
| AlmaLinux:8 | podman-catatonit | 4:4.9.4-30.module_el8.10.0+4136+16425343 | ALSA-2026:4672 |
| AlmaLinux:10 | podman-docker | 7:5.6.0-12.el10_1.alma.1 | ALSA-2026:3336 |
| AlmaLinux:8 | podman-docker | 4:4.9.4-30.module_el8.10.0+4136+16425343 | ALSA-2026:4672 |
| AlmaLinux:9 | podman-docker | 6:5.6.0-14.el9_7 | ALSA-2026:3337 |
| AlmaLinux:8 | podman-gvproxy | 4:4.9.4-30.module_el8.10.0+4136+16425343 | ALSA-2026:4672 |
| AlmaLinux:8 | podman-plugins | 4:4.9.4-30.module_el8.10.0+4136+16425343 | ALSA-2026:4672 |
| AlmaLinux:9 | podman-plugins | 6:5.6.0-14.el9_7 | ALSA-2026:3337 |
| AlmaLinux:8 | podman-remote | 4:4.9.4-30.module_el8.10.0+4136+16425343 | ALSA-2026:4672 |
| AlmaLinux:9 | podman-remote | 6:5.6.0-14.el9_7 | ALSA-2026:3337 |
| AlmaLinux:8 | podman-tests | 4:4.9.4-30.module_el8.10.0+4136+16425343 | ALSA-2026:4672 |
| AlmaLinux:9 | podman-tests | 6:5.6.0-14.el9_7 | ALSA-2026:3337 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+3970+8445edf6 | ALSA-2026:4672 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+4120+03ad4b47 | ALSA-2026:4672 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+3876+e55593a8 | ALSA-2026:4672 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:4672 |
| AlmaLinux:8 | python3-podman | 4.9.0-3.module_el8.10.0+4016+efd18bf8 | ALSA-2026:4672 |
| AlmaLinux:8 | runc | 4:1.2.9-4.module_el8.10.0+4136+16425343 | ALSA-2026:4672 |
| AlmaLinux:9 | runc | 4:1.4.0-2.el9_7 | ALSA-2026:3291 |
| AlmaLinux:10 | skopeo | 2:1.20.0-3.el10_1 | ALSA-2026:3343 |
| AlmaLinux:8 | skopeo | 2:1.14.5-7.module_el8.10.0+4136+16425343 | ALSA-2026:4672 |
| AlmaLinux:9 | skopeo | 2:1.20.0-3.el9_7 | ALSA-2026:3340 |
| AlmaLinux:10 | skopeo-tests | 2:1.20.0-3.el10_1 | ALSA-2026:3343 |
| AlmaLinux:8 | skopeo-tests | 2:1.14.5-7.module_el8.10.0+4136+16425343 | ALSA-2026:4672 |
| AlmaLinux:9 | skopeo-tests | 2:1.20.0-3.el9_7 | ALSA-2026:3340 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+3926+f12484f5 | ALSA-2026:4672 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+4082+f7f0c95e | ALSA-2026:4672 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+4023+db236c53 | ALSA-2026:4672 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+4047+545787c4 | ALSA-2026:4672 |
| AlmaLinux:8 | toolbox | 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:4672 |
| AlmaLinux:8 | toolbox-tests | 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:4672 |
| AlmaLinux:8 | udica | 0.2.6-21.module_el8.10.0+4068+0e21408f | ALSA-2026:4672 |
| AlmaLinux:10 | yggdrasil | 0.4.8-3.el10_1 | ALSA-2026:5146 |
| AlmaLinux:10 | yggdrasil-devel | 0.4.8-3.el10_1 | ALSA-2026:5146 |
| AlmaLinux:10 | yggdrasil-worker-package-manager | 0.2.3-4.el10_1 | ALSA-2026:5145 |
| Alpine:v3.23 | etcd | 3.6.8-r0 | ALPINE-CVE-2025-61726 |
| Alpine:v3.24 | etcd | 3.6.8-r0 | ALPINE-CVE-2025-61726 |
| Alpine:v3.22 | go | 1.24.12-r0 | ALPINE-CVE-2025-61726 |
| Alpine:v3.23 | go | 1.25.6-r0 | ALPINE-CVE-2025-61726 |
| Alpine:v3.24 | go | 1.25.6-r0 | ALPINE-CVE-2025-61726 |
| Debian:12 | golang-1.19 | no fix listed | DEBIAN-CVE-2025-61726 |
| Debian:13 | golang-1.24 | no fix listed | DEBIAN-CVE-2025-61726 |
| Go | stdlib | 1.24.12, 1.25.6 | GO-2026-4341 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+2001+6a33db9f | RLSA-2026:4672 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:4672 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1896+b18fa106 | RLSA-2026:4672 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1874+ce489889 | RLSA-2026:4672 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1880+8e896d1b | RLSA-2026:4672 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:4672 |
| Rocky Linux:10 | buildah | 2:1.41.8-2.el10_1 | RLSA-2026:3297 |
| Rocky Linux:9 | buildah | 2:1.41.8-2.el9_7 | RLSA-2026:3298 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:4672 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1825+623b0c20 | RLSA-2026:4672 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:4672 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:4672 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:4672 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:4672 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1874+ce489889 | RLSA-2026:4672 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:4672 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:4672 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:4672 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:4672 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:4672 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:4672 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:4672 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1874+ce489889 | RLSA-2026:4672 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:4672 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:4672 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:4672 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:4672 |
| Rocky Linux:8 | container-selinux | 2:2.229.0-2.module+el8.10.0+1896+b18fa106 | RLSA-2026:4672 |
| Rocky Linux:8 | container-selinux | 2:2.229.0-2.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:4672 |
| Rocky Linux:8 | container-selinux | 2:2.229.0-2.module+el8.10.0+2001+6a33db9f | RLSA-2026:4672 |
| Rocky Linux:8 | container-selinux | 2:2.229.0-2.module+el8.10.0+1874+ce489889 | RLSA-2026:4672 |
| Rocky Linux:8 | container-selinux | 2:2.229.0-2.module+el8.10.0+1825+623b0c20 | RLSA-2026:4672 |
| Rocky Linux:8 | container-selinux | 2:2.229.0-2.module+el8.10.0+1843+6892ab28 | RLSA-2026:4672 |
| Rocky Linux:8 | container-selinux | 2:2.229.0-2.module+el8.10.0+1872+2e18eb19 | RLSA-2026:4672 |
| Rocky Linux:8 | container-selinux | 2:2.229.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2026:4672 |
| Rocky Linux:8 | container-selinux | 2:2.229.0-2.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:4672 |
| Rocky Linux:8 | container-selinux | 2:2.229.0-2.module+el8.10.0+1880+8e896d1b | RLSA-2026:4672 |
| Rocky Linux:9 | containernetworking-plugins | 1:1.9.0-2.el9 | RLSA-2026:18913 |
| Rocky Linux:9 | containernetworking-plugins | 1:1.7.1-3.el9_7 | RLSA-2026:3341 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1896+b18fa106 | RLSA-2026:4672 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:4672 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+2001+6a33db9f | RLSA-2026:4672 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Go standard library | net/url | 0 – before 1.24.121.25.0 – before 1.25.6 |
Weakness: CWE-770 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://go.dev/cl/736712
- https://go.dev/issue/77101
- https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc
- https://pkg.go.dev/vuln/GO-2026-4341
- https://access.redhat.com/security/cve/CVE-2025-61726 vdb-entry, x_refsource_REDHAT
- RHBZ#2434432 issue-tracking, x_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61726.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:3958 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:7676 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:4460 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3959 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6278 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54757 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26527 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26541 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:28886 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:28961 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10096 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3416 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17595 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3875 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17446 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6277 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3186 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:66401 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:28047 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3391 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:39810 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:5968 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:14868 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3843 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:4166 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3813 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3192 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3977 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3831 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3816 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17084 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:4256 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:5852 vendor-advisory, x_refsource_REDHAT