Metrics
Affected Vendors & Products
Thu, 29 Jan 2026 14:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Golang go
|
|
| Weaknesses | NVD-CWE-noinfo | |
| CPEs | cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Golang go
|
Wed, 12 Nov 2025 00:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-1286 | |
| References |
| |
| Metrics |
threat_severity
|
threat_severity
|
Tue, 04 Nov 2025 22:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Thu, 30 Oct 2025 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
Thu, 30 Oct 2025 14:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Golang
Golang net |
|
| Vendors & Products |
Golang
Golang net |
Wed, 29 Oct 2025 22:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: "http://[::1]/". IPv4 addresses and hostnames must not appear within square brackets. Parse did not enforce this requirement. | |
| Title | Insufficient validation of bracketed IPv6 hostnames in net/url | |
| References |
|
Status: PUBLISHED
Assigner: Go
Published:
Updated: 2025-11-04T21:10:57.384Z
Reserved: 2025-05-13T23:31:29.597Z
Link: CVE-2025-47912
Updated: 2025-11-04T21:10:57.384Z
Status : Analyzed
Published: 2025-10-29T23:16:18.187
Modified: 2026-01-29T13:57:18.690
Link: CVE-2025-47912
OpenCVE Enrichment
Updated: 2025-10-30T14:37:39Z