Skip to content
OpenAdvisories
Medium · 4.4 Public exploit CVE-2025-22870 EUVD-2025-6690GHSA-qxp5-gwg8-xv66GO-2025-3503

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Published Mar 12, 2025 · Updated Apr 16, 2026 · Assigned by Go

Vendor: Go standard library Vendor: golang.org/x/net Product: golang.org/x/net/http/httpproxy Product: golang.org/x/net/proxy Product: net/http Package: aactl Package: actions-runner-controller Package: actions-runner-controller-compat Package: addon-resizer Package: addon-resizer-compat Package: amazon-cloudwatch-agent Package: amazon-cloudwatch-agent-all Package: amazon-cloudwatch-agent-amazon-cloudwatch-agent-config-wizard Package: amazon-cloudwatch-agent-compat Package: amazon-cloudwatch-agent-config-downloader Package: amazon-cloudwatch-agent-config-translator Package: amazon-cloudwatch-agent-operator Package: amazon-cloudwatch-agent-operator-compat Package: amazon-cloudwatch-agent-start-amazon-cloudwatch-agent Package: amazon-k8s-cni Package: amazon-k8s-cni-compat Package: amazon-k8s-cni-init Package: amazon-k8s-cni-init-compat Package: apko Package: argo-events Package: argo-rollouts Package: argo-workflows Package: argocd-image-updater Package: argocd-image-updater-compat Package: atlantis Package: aws-application-networking-k8s Package: aws-application-networking-k8s-compat Package: aws-efs-csi-driver Package: aws-load-balancer-controller Package: aws-load-balancer-controller-compat Package: aws-network-policy-agent Package: aws-network-policy-agent-compat Package: aws-s3-controller Package: azcopy Package: azcopy Package: bank-vaults Package: bank-vaults-template Package: bom Package: boring-registry Package: buildah Package: buildctl Package: buildkitd Package: caddy Package: caddy-man Package: caddy-src Package: cadvisor Package: cadvisor-compat Package: cass-operator Package: cass-operator-compat Package: cass-operator-config Package: cert-exporter Package: cert-manager-cmctl Package: cert-manager-istio-csr Package: cert-manager-istio-csr-compat Package: cert-manager-webhook-pdns Package: certificate-transparency Package: certificate-transparency-trillian-ctserver Package: cfssl Package: cfssl-bundle Package: cfssl-certinfo Package: cfssl-json Package: cfssl-mkbundle Package: cfssl-multirootca Package: cfssl-newkey Package: cfssl-scan Package: chartmuseum Package: cilium-cli Package: cloud-provider-aws-1.31 Package: cloud-provider-aws-1.31-cloud-controller-manager Package: cloud-provider-aws-1.31-ecr-credential-provider Package: cloud-provider-gcp-cloud-controller-manager Package: cloud-provider-gcp-cloud-controller-manager-compat Package: cloudflared Package: cloudnative-pg Package: cloudnative-pg-plugins Package: cloudprober Package: cloudprober-compat Package: cluster-api-aws-controller Package: cluster-api-aws-controller-compat Package: cluster-proportional-autoscaler Package: cluster-proportional-autoscaler-compat Package: cni-plugins Package: cni-plugins-aws-k8s-compat Package: cni-plugins-bandwidth Package: cni-plugins-bandwidth-compat Package: cni-plugins-bridge Package: cni-plugins-bridge-compat Package: cni-plugins-dhcp Package: cni-plugins-dhcp-compat Package: cni-plugins-dummy Package: cni-plugins-dummy-compat Package: cni-plugins-firewall Package: cni-plugins-firewall-compat Package: cni-plugins-host-device Package: cni-plugins-host-device-compat Package: cni-plugins-host-local Package: cni-plugins-host-local-compat Package: cni-plugins-ipam Package: cni-plugins-ipvlan Package: cni-plugins-ipvlan-compat Package: cni-plugins-loopback Package: cni-plugins-loopback-compat Package: cni-plugins-macvlan Package: cni-plugins-macvlan-compat Package: cni-plugins-main Package: cni-plugins-meta Package: cni-plugins-portmap Package: cni-plugins-portmap-compat Package: cni-plugins-ptp Package: cni-plugins-ptp-compat Package: cni-plugins-sbr Package: cni-plugins-sbr-compat Package: cni-plugins-static Package: cni-plugins-static-compat Package: cni-plugins-tap Package: cni-plugins-tap-compat Package: cni-plugins-tuning Package: cni-plugins-tuning-compat Package: cni-plugins-vlan Package: cni-plugins-vlan-compat Package: cni-plugins-vrf Package: cni-plugins-vrf-compat Package: conftest Package: containerd-1 Package: containerd-2 Package: containerd-service-1 Package: containerd-service-2 Package: containerd-shim-runc-v2-1 Package: containerd-shim-runc-v2-2 Package: containerd-stress-1 Package: containerd-stress-2 Package: controller-gen Package: cortex Package: cosign Package: cri-tools Package: crictl Package: critest Package: croc Package: crossplane-crank Package: crossplane-provider-aws Package: crossplane-provider-aws-cloudformation Package: crossplane-provider-aws-cloudformation-compat Package: crossplane-provider-aws-cloudfront Package: crossplane-provider-aws-cloudfront-compat Package: crossplane-provider-aws-cloudwatchlogs Package: crossplane-provider-aws-cloudwatchlogs-compat Package: crossplane-provider-aws-dynamodb Package: crossplane-provider-aws-dynamodb-compat Package: crossplane-provider-aws-ec2 Package: crossplane-provider-aws-ec2-compat Package: crossplane-provider-aws-eks Package: crossplane-provider-aws-eks-compat Package: crossplane-provider-aws-elasticache Package: crossplane-provider-aws-elasticache-compat Package: crossplane-provider-aws-firehose Package: crossplane-provider-aws-firehose-compat Package: crossplane-provider-aws-iam Package: crossplane-provider-aws-iam-compat Package: crossplane-provider-aws-kinesis Package: crossplane-provider-aws-kinesis-compat Package: crossplane-provider-aws-kms Package: crossplane-provider-aws-kms-compat Package: crossplane-provider-aws-lambda Package: crossplane-provider-aws-lambda-compat Package: crossplane-provider-aws-memorydb Package: crossplane-provider-aws-memorydb-compat Package: crossplane-provider-aws-rds Package: crossplane-provider-aws-rds-compat Package: crossplane-provider-aws-route53 Package: crossplane-provider-aws-route53-compat Package: crossplane-provider-aws-s3 Package: crossplane-provider-aws-s3-compat Package: crossplane-provider-aws-sns Package: crossplane-provider-aws-sns-compat Package: crossplane-provider-aws-sqs Package: crossplane-provider-aws-sqs-compat Package: crossplane-provider-azure-authorization Package: crossplane-provider-azure-authorization-compat Package: crossplane-provider-azure-managedidentity Package: crossplane-provider-azure-managedidentity-compat Package: crossplane-provider-azure-sql Package: crossplane-provider-azure-sql-compat Package: crossplane-provider-azure-storage Package: crossplane-provider-azure-storage-compat Package: crossplane-provider-family-aws Package: crossplane-provider-family-aws-compat Package: crossplane-provider-family-azure Package: crossplane-provider-family-azure-compat Package: crossplane-provider-keycloak Package: crossplane-provider-sql Package: ctr-1 Package: ctr-2 Package: cue Package: cue-bash-completion Package: cue-fish-completion Package: cue-zsh-completion Package: dagdotdev Package: dbmate Package: descheduler Package: dex Package: dex-iamguarded-compat Package: dgraph Package: distribution Package: dive Package: docker-cli-buildx Package: docker-compose Package: docker-dind Package: dockerize Package: doppler-kubernetes-operator Package: dynamic-localpv-provisioner Package: eksctl Package: emissary Package: emissary-apiext Package: emissary-oci-entrypoint Package: envoy-gateway Package: envoy-gateway-compat Package: envoy-gateway-egctl Package: envoy-ratelimit Package: falco-exporter Package: falcoctl Package: falcosidekick Package: filebrowser Package: filebrowser-compat Package: flannel Package: flannel-compat Package: fluent-bit-plugin-loki Package: fluent-operator Package: fluent-watcher Package: fluent-watcher-compat Package: fluent-watcher-config Package: flux Package: flux-helm-controller Package: flux-helm-controller-iamguarded-compat Package: flux-image-automation-controller Package: flux-image-automation-controller-compat Package: flux-image-automation-controller-iamguarded-compat Package: flux-image-reflector-controller Package: flux-image-reflector-controller-iamguarded-compat Package: flux-kustomize-controller Package: flux-kustomize-controller-iamguarded-compat Package: flux-notification-controller Package: flux-notification-controller-iamguarded-compat Package: flux-source-controller Package: flux-source-controller-iamguarded-compat Package: flyte Package: fq Package: frp Package: fulcio Package: fuse-overlayfs-snapshotter Package: gatus Package: gatus-compat Package: gcsfuse Package: gh Package: gh-doc Package: git-lfs Package: git-lfs Package: git-lfs-config Package: gitness Package: gitsign Package: gitsign-config Package: gitsign-credential-cache Package: gke-gcloud-auth-plugin Package: glab Package: glow Package: go Package: go-discover Package: go-licenses Package: golang Package: golang-1.10 Package: golang-1.13 Package: golang-1.14 Package: golang-1.16 Package: golang-1.17 Package: golang-1.18 Package: golang-1.19 Package: golang-1.20 Package: golang-1.21 Package: golang-1.22 Package: golang-1.23 Package: golang-1.24 Package: golang-1.24 Package: golang-1.6 Package: golang-1.8 Package: golang-1.9 Package: golang.org/x/net Package: gptscript Package: gpu-feature-discovery Package: grafana-agent-operator Package: grafana-alloy Package: grafana-operator Package: grafana-operator-bitnami-compat Package: grafana-rollout-operator Package: grpc-health-probe Package: grpc-health-probe-compat Package: grpcurl Package: guac Package: guaccsub Package: guacgql Package: guacingest Package: guacone Package: harbor-registry Package: harbor-scanner-trivy Package: hcloud Package: helm-operator Package: helm-operator-compat Package: helm-push Package: hey Package: hubble Package: hubble-compat Package: hubble-ui Package: hubble-ui-backend Package: hugo Package: hugo-extended Package: hydra Package: influxdb Package: ingress-nginx-controller-1.12 Package: ip-masq-agent Package: jaeger-operator Package: jaeger-operator-compat Package: jitsucom-bulker Package: jitsucom-bulker-bulker Package: jitsucom-bulker-bulker-compat Package: jitsucom-bulker-ingest Package: jitsucom-bulker-ingest-compat Package: jitsucom-bulker-ingmgr Package: jitsucom-bulker-ingmgr-compat Package: jitsucom-bulker-sidecar Package: jitsucom-bulker-sidecar-compat Package: jitsucom-bulker-syncctl Package: jitsucom-bulker-syncctl-compat Package: k3d Package: k3d-proxy Package: k3d-tools Package: k3s-1.32 Package: k3s-multicall-1.32 Package: k3s-static Package: k3s-static-1.32 Package: k6 Package: k8s-device-plugin Package: k8sgpt Package: k8sgpt-operator Package: k8sgpt-operator-compat Package: k8ssandra-client Package: k8ssandra-client-compat Package: k9s Package: kaf Package: kafka_exporter Package: kafka-proxy Package: kafka-proxy-compat Package: kaniko Package: kaniko-compat Package: kaniko-warmer Package: kaniko-warmer-compat Package: kapp Package: kapp-controller Package: kapp-controller-compat Package: kargo Package: kargo-oci-compat Package: katib-controller Package: katib-controller-compat Package: katib-db-manager Package: katib-db-manager-compat Package: katib-earlystopping Package: katib-file-metricscollector Package: katib-file-metricscollector-compat Package: katib-suggestion-goptuna Package: katib-suggestion-goptuna-compat Package: katib-suggestion-hyperband Package: katib-suggestion-hyperopt Package: katib-suggestion-nas-darts Package: katib-suggestion-nas-enas Package: katib-suggestion-optuna-enas Package: katib-suggestion-pbt-enas Package: katib-suggestion-skopt-enas Package: katib-tfevent-metricscollector Package: kbld Package: keda Package: kiali Package: kine Package: knative-client Package: ko Package: kor Package: kots Package: kots-compat Package: kots-symlink-compat Package: kpt Package: kserve Package: kserve-agent Package: kserve-agent-compat Package: kserve-manager Package: kserve-manager-compat Package: kserve-modelmesh-serving Package: kserve-modelmesh-serving-compat Package: kserve-qpext Package: kserve-qpext-compat Package: kserve-router Package: kserve-router-compat Package: kserve-storage-controller Package: ksops Package: ksops-compat Package: kube-bench Package: kube-bench-configs Package: kube-fluentd-operator Package: kube-fluentd-operator-compat Package: kube-fluentd-operator-default-config Package: kube-fluentd-operator-oci-entrypoint Package: kube-metrics-adapter Package: kube-rbac-proxy Package: kube-state-metrics Package: kube-state-metrics-iamguarded-compat Package: kube-vip Package: kube-vip-compat Package: kubectl-1.29 Package: kubectl-1.29-default Package: kubectl-1.30 Package: kubectl-1.30-default Package: kubectl-1.31 Package: kubectl-1.31-default Package: kubectl-1.32 Package: kubectl-1.32-default Package: kubectl-argo-rollouts Package: kubectl-bash-completion-1.29 Package: kubectl-bash-completion-1.30 Package: kubeflow Package: kubeflow-access-management Package: kubeflow-access-management-compat Package: kubeflow-admission-webhook Package: kubeflow-admission-webhook-compat Package: kubeflow-katib Package: kubeflow-notebook-controller Package: kubeflow-notebook-controller-compat Package: kubeflow-pipelines Package: kubeflow-pipelines-apiserver Package: kubeflow-pipelines-cache_server Package: kubeflow-pipelines-cache-deployer Package: kubeflow-pipelines-cache-deployer-compat Package: kubeflow-pipelines-frontend Package: kubeflow-pipelines-metadata-envoy-config Package: kubeflow-pipelines-metadata-writer Package: kubeflow-pipelines-metadata-writer-compat Package: kubeflow-pipelines-persistence_agent Package: kubeflow-pipelines-scheduledworkflow Package: kubeflow-pipelines-viewer-crd-controller Package: kubeflow-profile-controller Package: kubeflow-profile-controller-compat Package: kubeflow-pvcviewer-controller Package: kubeflow-pvcviewer-controller-compat Package: kubeflow-tensorboard-controller Package: kubeflow-tensorboard-controller-compat Package: kuberay-operator Package: kuberay-operator-compat Package: kuberlr Package: kubernetes-csi-driver-hostpath Package: kubernetes-csi-driver-nfs Package: kubernetes-csi-driver-nfs-compat Package: kubernetes-csi-external-attacher Package: kubernetes-csi-external-attacher-compat Package: kubernetes-csi-external-provisioner Package: kubernetes-csi-external-resizer Package: kubernetes-csi-livenessprobe Package: kubernetes-dashboard-api Package: kubernetes-dashboard-api-compat Package: kubernetes-dashboard-auth Package: kubernetes-dashboard-auth-compat Package: kubernetes-dashboard-metrics-scraper Package: kubernetes-dashboard-metrics-scraper-compat Package: kubernetes-dashboard-web Package: kubernetes-dashboard-web-compat Package: kubernetes-dns-node-cache Package: kubernetes-event-exporter Package: kubernetes-event-exporter-iamguarded-compat Package: kubescape Package: kubevela Package: kubevela-vela-cli Package: kubevela-vela-core Package: kubevela-vela-core-compat Package: kubewatch Package: kwok Package: kwokctl Package: kyverno-notation-aws Package: kyverno-notation-aws-compat Package: kyverno-policy-reporter Package: kyverno-policy-reporter-compat Package: kyverno-policy-reporter-kyverno-plugin Package: kyverno-policy-reporter-kyverno-plugin-compat Package: lazygit Package: litefs Package: litestream Package: local-path-provisioner Package: local-static-provisioner Package: local-static-provisioner-compat Package: local-volume-node-cleanup Package: local-volume-node-cleanup-compat Package: lvm-driver Package: lvm-driver-compat Package: malcontent Package: melange Package: memcached-exporter Package: memcached-exporter-iamguarded-compat Package: metacontroller Package: metallb Package: metallb-controller Package: metallb-controller-compat Package: metallb-cp-tool Package: metallb-cp-tool-compat Package: metallb-frr Package: metallb-frr-compat Package: metallb-speaker Package: metallb-speaker-compat Package: metrics-server Package: metrics-server-compat Package: metrics-server-iamguarded-compat Package: minio Package: minio-iamguarded-2025-compat Package: minio-operator Package: minio-operator-compat Package: minio-operator-sidecar Package: minio-operator-sidecar-compat Package: mkcert Package: mods Package: mongo-tools Package: mps-control-daemon Package: multus-cni Package: multus-cni-compat Package: nats Package: nerdctl Package: neuvector-scanner Package: neuvector-scanner-monitor Package: neuvector-scanner-task Package: neuvector-sigstore-interface Package: newrelic-infra-operator Package: newrelic-infrastructure-agent Package: newrelic-nri-kube-events Package: nfs-subdir-external-provisioner Package: nginx-prometheus-exporter Package: nginx-prometheus-exporter-iamguarded-compat Package: nodetaint Package: nri-discovery-kubernetes Package: nri-discovery-kubernetes-compat Package: nri-kafka Package: nri-kafka-compat Package: nri-kafka-jdk11 Package: nri-kubernetes Package: nri-prometheus Package: nsc Package: nuclei Package: nvidia-device-plugin Package: oauth2-proxy Package: oauth2-proxy-iamguarded-compat Package: octo-sts Package: octo-sts-webhook Package: ollama Package: ollama-cpu Package: op-geth Package: op-geth-abigen Package: op-geth-clef Package: op-geth-compat Package: op-geth-devp2p Package: op-geth-evm Package: op-geth-rlpdump Package: opa Package: opa-envoy Package: openbao Package: openbao-compat Package: openbao-k8s Package: openbao-k8s-compat Package: opencost Package: opencost-compat Package: openfga Package: openfga-compat Package: openfga-healthcheck-compat Package: opensearch-k8s-operator Package: opensearch-k8s-operator-compat Package: opentelemetry-collector Package: opentelemetry-collector-compat Package: opentelemetry-collector-contrib Package: opentelemetry-collector-contrib-compat Package: opentelemetry-collector-ocb Package: opentelemetry-operator Package: opentelemetry-operator-compat Package: opentelemetry-operator-otel-allocator Package: opentelemetry-operator-otel-allocator-compat Package: opentofu-1.9 Package: osv-scanner Package: otel-cli Package: packer Package: pluto Package: pluto-compat Package: policy-controller Package: policy-controller-tester Package: portieris Package: portieris-compat Package: postgres-operator Package: postgres-operator-compat Package: prometheus Package: prometheus-3.2 Package: prometheus-adapter Package: prometheus-alertmanager Package: prometheus-alertmanager-iamguarded-compat Package: prometheus-node-exporter Package: prometheus-process-exporter Package: promxy Package: pulumi Package: pulumi-kubernetes-operator Package: pulumi-language-dotnet Package: pulumi-language-go Package: pulumi-language-java Package: pulumi-language-nodejs Package: pulumi-language-python Package: pulumi-language-yaml Package: py3.10-ambassador Package: py3.11-ambassador Package: py3.12-ambassador Package: py3.13-ambassador Package: q Package: rabbitmq-cluster-operator Package: rabbitmq-cluster-operator-compat Package: rabbitmq-cluster-operator-iamguarded-compat Package: rabbitmq-messaging-topology-operator Package: rabbitmq-messaging-topology-operator-compat Package: rabbitmq-messaging-topology-operator-iamguarded-compat Package: rancher-fleet Package: rancher-fleet-agent Package: rancher-fleet-cli Package: rancher-fleet-controller Package: rancher-fleet-termination-log Package: rclone Package: rclone Package: rclone-compat Package: redis-operator Package: redis-operator-compat Package: rekor Package: rekor-backfill-index Package: rekor-cli Package: rekor-server Package: restic Package: restic-compat Package: rook Package: rook-oci-compat Package: rootlesskit Package: rootlesskit-config-nonroot Package: rqlite Package: rqlite-oci-entrypoint Package: runc Package: runc-doc Package: scorecard Package: seaweedfs Package: seaweedfs-iamguarded-compat Package: seaweedfs-oci-entrypoint Package: secrets-store-csi-driver Package: secrets-store-csi-driver-crds Package: secrets-store-csi-driver-provider-aws Package: secrets-store-csi-driver-provider-azure Package: secrets-store-csi-driver-provider-gcp Package: sftpgo Package: sftpgo-plugin-auth Package: sftpgo-plugin-eventsearch Package: sftpgo-plugin-eventstore Package: sftpgo-plugin-geoipfilter Package: sftpgo-plugin-kms Package: sftpgo-plugin-pubsub Package: sigstore-scaffolding Package: sigstore-scaffolding-cloudsqlproxy Package: sigstore-scaffolding-ctlog-createctconfig Package: sigstore-scaffolding-ctlog-managectroots Package: sigstore-scaffolding-ctlog-verifyfulcio Package: sigstore-scaffolding-fulcio-createcerts Package: sigstore-scaffolding-getoidctoken Package: sigstore-scaffolding-rekor-createsecret Package: sigstore-scaffolding-trillian-createdb Package: sigstore-scaffolding-trillian-createtree Package: sigstore-scaffolding-trillian-updatetree Package: sigstore-scaffolding-tsa-createcertchain Package: sigstore-scaffolding-tuf-createsecret Package: sigstore-scaffolding-tuf-server Package: skaffold Package: skopeo Package: slsa-verifier Package: smarter-device-manager Package: snyk-cli Package: sonobuoy Package: sonobuoy-compat Package: sops Package: spark-operator Package: spark-operator-oci-entrypoint Package: spegel Package: spegel-compat Package: spicedb Package: spicedb-compat Package: spiffe-helper Package: spiffe-helper-compat Package: spire-agent Package: spire-controller-manager Package: spire-controller-manager-compat Package: spire-oidc-discovery-provider Package: spire-server Package: splunk-otel-collector Package: splunk-otel-collector-compat Package: splunk-otel-collector-doc Package: spqr Package: sql_exporter Package: src Package: src-fingerprint Package: sriov-network-device-plugin Package: sriov-network-device-plugin-entrypoint Package: stakater-reloader Package: stakater-reloader-compat Package: stdlib Package: step Package: step-ca Package: step-issuer Package: step-issuer-compat Package: step-kms-plugin Package: stern Package: syft Package: tailscale Package: tailscale-compat Package: task Package: tdbg Package: tdbg-compat Package: tekton-chains Package: telegraf Package: temporal Package: temporal-cassandra-tool Package: temporal-cassandra-tool-compat Package: temporal-compat Package: temporal-server Package: temporal-server-compat Package: temporal-server-oci-entrypoint Package: temporal-server-schema Package: temporal-sql-tool Package: temporal-sql-tool-compat Package: temporal-ui-server Package: temporal-ui-server-oci-entrypoint Package: terraform Package: terraform-compat Package: terraform-docs Package: terraform-local-provider-config Package: terraform-provider-azapi Package: terraform-provider-azuread Package: terraform-provider-azurerm Package: terraform-provider-google Package: terraform-provider-grafana Package: terraform-provider-kubernetes Package: terraform-provider-pagerduty Package: terraform-provider-random Package: terraform-provider-sendgrid Package: terraform-provider-time Package: terraform-provider-tls Package: tflint Package: tflint-compat Package: tfsec Package: thanos Package: thanos-iamguarded-compat Package: thanos-operator Package: thanos-operator-compat Package: timestamp-authority Package: timestamp-authority-cli Package: timestamp-authority-server Package: timoni Package: tkn Package: traefik-3.3 Package: trillian Package: trillian-logserver Package: trillian-logsigner Package: trivy Package: trust-manager Package: undock Package: vault-benchmark Package: vault-benchmark-compat Package: vault-k8s Package: vcluster Package: vcluster-cli Package: vcluster-syncer Package: velero Package: velero-compat Package: velero-plugin-for-aws Package: velero-plugin-for-aws-compat Package: velero-plugin-for-csi Package: velero-plugin-for-csi-compat Package: velero-plugin-for-microsoft-azure Package: velero-plugin-for-microsoft-azure-compat Package: velero-restore-helper Package: vertical-pod-autoscaler Package: vertical-pod-autoscaler-recommender Package: vertical-pod-autoscaler-updater Package: vexctl Package: victoriametrics Package: victoriametrics-cluster Package: victoriametrics-compat Package: victoriametrics-vmagent Package: victoriametrics-vmagent-cluster Package: victoriametrics-vmagent-cluster-compat Package: victoriametrics-vmagent-compat Package: victoriametrics-vmalert Package: victoriametrics-vmalert-cluster Package: victoriametrics-vmalert-cluster-compat Package: victoriametrics-vmalert-compat Package: victoriametrics-vmauth Package: victoriametrics-vmauth-compat Package: victoriametrics-vminsert-cluster Package: victoriametrics-vminsert-cluster-compat Package: victoriametrics-vmselect-cluster Package: victoriametrics-vmselect-cluster-compat Package: victoriametrics-vmstorage-cluster Package: victoriametrics-vmstorage-cluster-compat Package: vitess Package: volume-modifier-for-k8s Package: wal-g Package: wal-g-pg Package: wave Package: weaviate Package: whereabouts Package: whereabouts-compat Package: wireguard-go Package: wuzz Package: x509-certificate-exporter Package: x509-certificate-exporter-compat Package: xeol Package: xeol-compat Package: yq Package: yunikorn-k8shim Package: yunikorn-k8shim-compat Package: zarf Package: zot Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Affected products

VendorProductAffectedFixed
Go standard library net/http < 1.23.7, 1.24.0-0 – < 1.24.1 1.23.7
golang.org/x/net golang.org/x/net/http/httpproxy < 0.36.0 0.36.0
golang.org/x/net golang.org/x/net/proxy < 0.36.0 0.36.0

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 13 golang-1.24 1.24.1-1 —
Debian 12 golang-1.19 No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS golang-1.24 No fix yet —
Ubuntu 25.10 golang-1.23 +1 No fix yet —
Ubuntu 24.04 LTS golang-1.21 +2 No fix yet —
Ubuntu 24.04 LTS golang-1.22 1.22.2-2ubuntu0.4 USN-7574-1
Ubuntu 22.04 LTS golang-1.17 +5 No fix yet —
Ubuntu 22.04 LTS golang-1.22 1.22.2-2~22.04.3 USN-7574-1
Ubuntu 20.04 LTS golang-1.13 +5 No fix yet —
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS golang-1.8 +2 No fix yet —
Ubuntu 16.04 LTS golang-1.6 +1 No fix yet —
Ubuntu 14.04 LTS golang-1.10 No fix yet —
Ubuntu Pro 22.04 LTS golang-1.13 No fix yet —
Ubuntu Pro 20.04 LTS golang-1.16 No fix yet —
Ubuntu Pro 18.04 LTS golang-1.13 +2 No fix yet —
Ubuntu Pro 16.04 LTS golang-1.13 +1 No fix yet —

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 amazon-ssm-agent 3.3.4624.0-150000.5.37.1 SUSE-SU-2026:2467-1
SLES 15 SP7 apptainer 1.4.5-150600.4.12.1 SUSE-SU-2026:0439-1
SLES 15 SP7 containerized-data-importer 1.64.0-150700.9.11.1 SUSE-SU-2026:2493-1
SLES 15 SP7 go1.23-openssl 1.23.12-150600.13.9.1 SUSE-SU-2025:03159-1
SLES 15 SP7 golang-github-prometheus-alertmanager 0.26.0-150100.4.25.2 SUSE-SU-2025:01992-1
SLES 15 SP7 golang-github-prometheus-node_exporter 1.9.1-150100.3.35.2 SUSE-SU-2025:01988-1
SLES 15 SP7 golang-github-prometheus-prometheus 2.53.4-150100.4.26.2 SUSE-SU-2025:01990-1
SLES 15 SP7 grafana 11.5.5-150200.3.72.2 SUSE-SU-2025:01991-1
SLES 15 SP7 ignition 2.14.0-150400.9.9.1 SUSE-SU-2025:02014-1
SLES 15 SP7 squashfuse 0.5.0-150600.3.2.1 SUSE-SU-2026:0439-1
SLES 15 SP6 amazon-ssm-agent 3.3.1611.0-150000.5.23.1 SUSE-SU-2026:2467-1, SUSE-SU-2025:0873-1
SLES 15 SP6 apptainer 1.3.6-150600.4.9.1 SUSE-SU-2026:0439-1, SUSE-SU-2025:0980-1
SLES 15 SP6 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SLES 15 SP6 go1.23 1.23.7-150000.1.24.1 SUSE-SU-2025:0803-1
SLES 15 SP6 go1.23-openssl 1.23.12-150600.13.9.1 SUSE-SU-2025:03159-1
SLES 15 SP6 go1.24 1.24.1-150000.1.12.1 SUSE-SU-2025:0802-1
SLES 15 SP6 golang-github-prometheus-alertmanager 0.26.0-150100.4.25.2 SUSE-SU-2025:01992-1
SLES 15 SP6 golang-github-prometheus-node_exporter 1.9.1-150100.3.35.2 SUSE-SU-2025:01988-1
SLES 15 SP6 golang-github-prometheus-prometheus 2.53.4-150100.4.26.2 SUSE-SU-2025:01990-1
SLES 15 SP6 grafana 11.5.5-150200.3.72.2 SUSE-SU-2025:01991-1
SLES 15 SP6 helm 3.17.2-150000.1.44.1 SUSE-SU-2025:1007-1
SLES 15 SP6 ignition 2.14.0-150400.9.9.1 SUSE-SU-2025:02014-1
SLES 15 SP6 skopeo 1.14.4-150300.11.22.1 SUSE-SU-2025:1055-1
SLES 15 SP6 squashfuse 0.5.0-150600.3.2.1 SUSE-SU-2026:0439-1
SLES 15 SP6 warewulf4 4.6.0-150500.6.34.1 SUSE-SU-2025:1094-1
SLES 15 SP5 amazon-ssm-agent 3.3.1611.0-150000.5.23.1 SUSE-SU-2026:2467-1, SUSE-SU-2025:0873-1
SLES 15 SP5 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SLES 15 SP5 go1.23-openssl 1.23.9-150000.1.9.1 SUSE-SU-2025:01731-1
SLES 15 SP5 golang-github-prometheus-node_exporter 1.9.1-150100.3.35.2 SUSE-SU-2025:01988-1
SLES 15 SP4 amazon-ssm-agent 3.3.1611.0-150000.5.23.1 SUSE-SU-2026:2467-1, SUSE-SU-2025:0873-1
SLES 15 SP4 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SLES 15 SP4 go1.23-openssl 1.23.9-150000.1.9.1 SUSE-SU-2025:01731-1
SLES 15 SP4 golang-github-prometheus-node_exporter 1.9.1-150100.3.35.2 SUSE-SU-2025:01988-1
SLES 15 SP3 amazon-ssm-agent 3.3.1611.0-150000.5.23.1 SUSE-SU-2025:0873-1
SLES 15 SP3 go1.23-openssl 1.23.9-150000.1.9.1 SUSE-SU-2025:01731-1
SLES 15 SP3 golang-github-prometheus-node_exporter 1.9.1-150100.3.35.2 SUSE-SU-2025:01988-1
Show 27 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP5 golang-github-prometheus-node_exporter 1.9.1-1.36.2 SUSE-SU-2025:01987-1
SLES 12 amazon-ssm-agent 3.3.1611.0-4.39.1 SUSE-SU-2026:2468-1, SUSE-SU-2025:0866-1
SLES for SAP 16.0 amazon-ssm-agent 3.3.4624.0-160000.1.1 SUSE-SU-2026:22157-1
SLES for SAP 15 SP5 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SLES for SAP 15 SP5 go1.23-openssl 1.23.9-150000.1.9.1 SUSE-SU-2025:01731-1
SLES for SAP 15 SP5 golang-github-prometheus-node_exporter 1.9.1-150100.3.35.2 SUSE-SU-2025:01988-1
SLES for SAP 15 SP4 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SLES for SAP 15 SP4 go1.23-openssl 1.23.9-150000.1.9.1 SUSE-SU-2025:01731-1
SLES for SAP 15 SP4 golang-github-prometheus-node_exporter 1.9.1-150100.3.35.2 SUSE-SU-2025:01988-1
SLES for SAP 15 SP3 go1.23-openssl 1.23.9-150000.1.9.1 SUSE-SU-2025:01731-1
SLES for SAP 15 SP3 golang-github-prometheus-node_exporter 1.9.1-150100.3.35.2 SUSE-SU-2025:01988-1
SLES 16.0 amazon-ssm-agent 3.3.4624.0-160000.1.1 SUSE-SU-2026:22157-1
SLE Micro 6.1 elemental-operator 1.7.2-slfo.1.1_1.1 SUSE-SU-2025:20328-1
SLE Micro 6.1 elemental-toolkit 2.2.3-slfo.1.1_1.1 SUSE-SU-2025:20373-1
SLE Micro 6.1 helm 3.17.2-slfo.1.1_1.1 SUSE-SU-2025:20278-1
SLE Micro 6.0 elemental-operator 1.6.8-1.1 SUSE-SU-2025:20184-1
SLE Micro 6.0 elemental-toolkit 2.1.3-1.1 SUSE-SU-2025:20210-1
SLE Micro 6.0 helm 3.17.2-1.1 SUSE-SU-2025:20196-1
SLE Micro 6.0 ignition 2.19.0-2.1 SUSE-SU-2025:20515-1
SLE Micro 6.0 salt 3006.0-13.1 SUSE-SU-2025:20504-1
SLE Micro 6.0 skopeo 1.14.4-3.1 SUSE-SU-2025:20179-1
SLE Micro 5.5 helm 3.17.2-150000.1.44.1 SUSE-SU-2025:1007-1
SLE Micro 5.5 skopeo 1.14.4-150300.11.22.1 SUSE-SU-2025:1055-1
SLE HPC 15 SP5 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SLE HPC 15 SP5 go1.23-openssl 1.23.9-150000.1.9.1 SUSE-SU-2025:01731-1
SLE HPC 15 SP5 golang-github-prometheus-node_exporter 1.9.1-150100.3.35.2 SUSE-SU-2025:01988-1
SLE HPC 15 SP5 warewulf4 4.6.0-150500.6.34.1 SUSE-SU-2025:1094-1
SLE HPC 15 SP4 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SLE HPC 15 SP4 go1.23-openssl 1.23.9-150000.1.9.1 SUSE-SU-2025:01731-1
SLE HPC 15 SP4 golang-github-prometheus-node_exporter 1.9.1-150100.3.35.2 SUSE-SU-2025:01988-1
SLE HPC 15 SP3 go1.23-openssl 1.23.9-150000.1.9.1 SUSE-SU-2025:01731-1
SLE HPC 15 SP3 golang-github-prometheus-node_exporter 1.9.1-150100.3.35.2 SUSE-SU-2025:01988-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update go1.22-EL 1.22.9-80002.1.3.5 SUSE-SU-2026:2764-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update golang-github-QubitProducts-exporter_exporter 0.4.0-80002.3.6.6 SUSE-SU-2026:2764-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update golang-github-lusitaniae-apache_exporter 1.0.10-80002.3.9.6 SUSE-SU-2026:2764-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update golang-github-prometheus-node_exporter 1.10.2-80002.3.3.6 SUSE-SU-2026:2764-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update golang-github-prometheus-promu 0.17.0-80002.3.6.5 SUSE-SU-2026:2764-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update golang-packaging 15.0.17-80002.3.3.4 SUSE-SU-2026:2764-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update prometheus-postgres_exporter 0.10.1-80002.3.3.6 SUSE-SU-2026:2764-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundle-libsodium 1.0.21-80002.3.3.4 SUSE-SU-2026:2764-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundle-swig 4.1.1-80002.3.3.4 SUSE-SU-2026:2764-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundle-zeromq 4.3.5-80002.3.9.4 SUSE-SU-2026:2764-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy +1 3.11.15-80002.4.12.4 SUSE-SU-2026:2764-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-docker 7.1.0-80002.4.3.5 SUSE-SU-2026:2764-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-lxml 6.0.2-80002.3.6.5 SUSE-SU-2026:2764-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-m2crypto 0.45.1-80002.3.14.2 SUSE-SU-2026:2764-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-passlib +1 1.7.4-80002.3.9.6 SUSE-SU-2026:2764-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pynacl 1.5.0-80002.3.6.5 SUSE-SU-2026:2764-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyopenssl 23.2.0-80002.3.6.5 SUSE-SU-2026:2764-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-requests 2.33.1-80002.4.3.5 SUSE-SU-2026:2764-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-tornado 6.3.2-80002.4.9.5 SUSE-SU-2026:2764-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-urllib3 2.0.7-80002.3.3.4 SUSE-SU-2026:2764-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-wheel +1 0.45.1-80002.3.8.2 SUSE-SU-2026:2764-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update scap-security-guide 0.1.79-80002.3.9.6 SUSE-SU-2026:2764-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update spacecmd 5.2.8-80002.3.12.4 SUSE-SU-2026:2764-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update uyuni-tools 5.2.12-80002.3.12.4 SUSE-SU-2026:2764-1
SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update venv-salt-minion 3006.0-80002.5.19.1 SUSE-SU-2026:2764-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update go1.22-EL 1.22.9-70002.1.3.2 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update golang-github-QubitProducts-exporter_exporter 0.4.0-70002.3.6.2 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update golang-github-lusitaniae-apache_exporter 1.0.10-70002.3.9.3 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update golang-github-prometheus-node_exporter 1.10.2-70002.3.3.3 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update golang-github-prometheus-promu 0.17.0-70002.3.6.2 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update golang-packaging 15.0.17-70002.1.3.1 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update mgr-push 5.2.4-70002.3.9.2 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update prometheus-postgres_exporter 0.10.1-70002.3.3.3 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update python-defusedxml-el7 0.5.0-70002.1.3.1 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update python-simplejson 3.3.1-70002.1.3.1 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update rhnlib 5.2.5-70002.3.9.1 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundle-libsodium 1.0.21-70002.3.3.1 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundle-swig 4.1.1-70002.3.3.1 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundle-zeromq 4.3.5-70002.3.9.1 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy +1 3.11.15-70002.4.12.1 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-docker 7.1.0-70002.4.3.2 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-lxml 6.0.2-70002.3.6.3 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-m2crypto 0.45.1-70002.3.14.2 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-passlib +1 1.7.4-70002.3.9.2 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pynacl 1.5.0-70002.3.6.2 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyopenssl 23.2.0-70002.3.6.1 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-requests 2.33.1-70002.4.3.2 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-tornado 6.3.2-70002.4.9.3 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-urllib3 2.0.7-70002.3.3.1 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-wheel +1 0.45.1-70002.3.8.1 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update spacecmd 5.2.8-70002.3.12.1 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update spacewalk-client-tools 5.2.6-70002.3.9.1 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update uyuni-common-libs 5.2.5-70002.3.6.1 SUSE-SU-2026:2765-1
SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update venv-salt-minion 3006.0-70002.5.19.1 SUSE-SU-2026:2765-1
SUSE Multi Linux Manager Tools RES-7 golang-github-QubitProducts-exporter_exporter 0.4.0-70002.3.6.2 SUSE-SU-2026:2765-1
SUSE Multi Linux Manager Tools RES-7 golang-github-lusitaniae-apache_exporter 1.0.10-70002.3.9.3 SUSE-SU-2026:2765-1
SUSE Multi Linux Manager Tools RES-7 golang-github-prometheus-node_exporter 1.10.2-70002.3.3.3 SUSE-SU-2026:2765-1
SUSE Multi Linux Manager Tools RES-7 mgr-push 5.2.4-70002.3.9.2 SUSE-SU-2026:2765-1
SUSE Multi Linux Manager Tools RES-7 prometheus-postgres_exporter 0.10.1-70002.3.3.3 SUSE-SU-2026:2765-1
SUSE Multi Linux Manager Tools RES-7 python-simplejson 3.3.1-70002.1.3.1 SUSE-SU-2026:2765-1
SUSE Multi Linux Manager Tools RES-7 rhnlib 5.2.5-70002.3.9.1 SUSE-SU-2026:2765-1
SUSE Multi Linux Manager Tools RES-7 spacecmd 5.2.8-70002.3.12.1 SUSE-SU-2026:2765-1
SUSE Multi Linux Manager Tools RES-7 spacewalk-client-tools 5.2.6-70002.3.9.1 SUSE-SU-2026:2765-1
SUSE Multi Linux Manager Tools RES-7 uyuni-common-libs 5.2.5-70002.3.6.1 SUSE-SU-2026:2765-1
SUSE Multi Linux Manager Tools RES-7 venv-salt-minion 3006.0-70002.5.19.1 SUSE-SU-2026:2765-1
SUSE Multi Linux Manager Tools EL-9 golang-github-QubitProducts-exporter_exporter 0.4.0-90002.3.6.4 SUSE-SU-2026:2763-1
SUSE Multi Linux Manager Tools EL-9 golang-github-lusitaniae-apache_exporter 1.0.10-90002.3.9.4 SUSE-SU-2026:2763-1
SUSE Multi Linux Manager Tools EL-9 golang-github-prometheus-node_exporter 1.10.2-90002.3.3.4 SUSE-SU-2026:2763-1
SUSE Multi Linux Manager Tools EL-9 prometheus-postgres_exporter 0.10.1-90002.3.3.4 SUSE-SU-2026:2763-1
SUSE Multi Linux Manager Tools EL-9 scap-security-guide 0.1.79-90002.3.9.1 SUSE-SU-2026:2763-1
SUSE Multi Linux Manager Tools EL-9 spacecmd 5.2.8-90002.3.12.1 SUSE-SU-2026:2763-1
SUSE Multi Linux Manager Tools EL-9 uyuni-tools 5.2.12-90002.3.12.1 SUSE-SU-2026:2763-1
SUSE Multi Linux Manager Tools EL-9 venv-salt-minion 3006.0-90002.5.19.1 SUSE-SU-2026:2763-1
SUSE Multi Linux Manager Tools EL-8 golang-github-QubitProducts-exporter_exporter 0.4.0-80002.3.6.6 SUSE-SU-2026:2764-1
SUSE Multi Linux Manager Tools EL-8 golang-github-lusitaniae-apache_exporter 1.0.10-80002.3.9.6 SUSE-SU-2026:2764-1
SUSE Multi Linux Manager Tools EL-8 golang-github-prometheus-node_exporter 1.10.2-80002.3.3.6 SUSE-SU-2026:2764-1
SUSE Multi Linux Manager Tools EL-8 prometheus-postgres_exporter 0.10.1-80002.3.3.6 SUSE-SU-2026:2764-1
SUSE Multi Linux Manager Tools EL-8 scap-security-guide 0.1.79-80002.3.9.6 SUSE-SU-2026:2764-1
SUSE Multi Linux Manager Tools EL-8 spacecmd 5.2.8-80002.3.12.4 SUSE-SU-2026:2764-1
SUSE Multi Linux Manager Tools EL-8 uyuni-tools 5.2.12-80002.3.12.4 SUSE-SU-2026:2764-1
SUSE Multi Linux Manager Tools EL-8 venv-salt-minion 3006.0-80002.5.19.1 SUSE-SU-2026:2764-1
SUSE Manager Server 4.3 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SUSE Manager Server 4.3 golang-github-prometheus-node_exporter 1.9.1-150100.3.35.2 SUSE-SU-2025:01988-1
SUSE Manager Server 4.3 release-notes-susemanager 4.3.15.2-150400.3.133.1 SUSE-SU-2025:01985-1
SUSE Manager Proxy Module 4.3 golang-github-prometheus-alertmanager 0.26.0-150100.4.25.2 SUSE-SU-2025:01992-1
SUSE Manager Proxy Module 4.3 golang-github-prometheus-prometheus 2.53.4-150100.4.26.2 SUSE-SU-2025:01990-1
SUSE Manager Proxy Module 4.3 prometheus-blackbox_exporter 0.26.0-150000.1.27.1 SUSE-SU-2025:01989-1
SUSE Manager Proxy 4.3 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SUSE Manager Proxy 4.3 golang-github-prometheus-node_exporter 1.9.1-150100.3.35.2 SUSE-SU-2025:01988-1
SUSE Manager Client Tools for SLE Micro 5 golang-github-prometheus-node_exporter 1.9.1-150100.3.35.2 SUSE-SU-2025:01988-1
SUSE Manager Client Tools for SLE Micro 5 prometheus-blackbox_exporter 0.26.0-150000.1.27.1 SUSE-SU-2025:01989-1
SUSE Manager Client Tools for RHEL, Liberty and Clones 9 golang-github-QubitProducts-exporter_exporter 0.4.0-1.9.1 SUSE-EL-9-CLIENT-TOOLS-2026-2254
SUSE Manager Client Tools for RHEL, Liberty and Clones 9 golang-github-prometheus-node_exporter 1.10.2-1.12.1 SUSE-EL-9-CLIENT-TOOLS-2026-2254
SUSE Manager Client Tools for RHEL, Liberty and Clones 9 prometheus-postgres_exporter 0.10.1-1.15.1 SUSE-EL-9-CLIENT-TOOLS-2026-2254
SUSE Manager Client Tools for RHEL, Liberty and Clones 9 scap-security-guide 0.1.80-1.44.1 SUSE-EL-9-CLIENT-TOOLS-2026-2254
SUSE Manager Client Tools for RHEL, Liberty and Clones 9 spacecmd 5.0.16-1.61.1 SUSE-EL-9-CLIENT-TOOLS-2026-2254
SUSE Manager Client Tools for RHEL, Liberty and Clones 9 uyuni-tools 0.1.39-1.32.1 SUSE-EL-9-CLIENT-TOOLS-2026-2254
SUSE Manager Client Tools 15 golang-github-prometheus-alertmanager 0.26.0-150100.4.25.2 SUSE-SU-2025:01992-1
SUSE Manager Client Tools 15 golang-github-prometheus-prometheus 2.53.4-150000.3.62.2 SUSE-SU-2025:01989-1
SUSE Manager Client Tools 15 grafana 11.5.5-150000.1.79.1 SUSE-SU-2025:01989-1
SUSE Manager Client Tools 15 prometheus-blackbox_exporter 0.26.0-150000.1.27.1 SUSE-SU-2025:01989-1
SUSE Manager Client Tools 12 golang-github-prometheus-alertmanager 0.26.0-1.31.2 SUSE-SU-2025:01987-1
SUSE Manager Client Tools 12 golang-github-prometheus-node_exporter 1.9.1-1.36.2 SUSE-SU-2025:01987-1
SUSE Manager Client Tools 12 golang-github-prometheus-prometheus 2.53.4-1.60.2 SUSE-SU-2025:01987-1
SUSE Manager Client Tools 12 grafana 11.5.5-1.79.2 SUSE-SU-2025:01987-1
SUSE Manager Client Tools 12 prometheus-blackbox_exporter 0.26.0-1.27.1 SUSE-SU-2025:01987-1
SUSE Enterprise Storage 7.1 go1.23-openssl 1.23.9-150000.1.9.1 SUSE-SU-2025:01731-1
SUSE Enterprise Storage 7.1 golang-github-prometheus-node_exporter 1.9.1-150100.3.35.2 SUSE-SU-2025:01988-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update fdupes 1.61-90002.3.3.1 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update go1.22-EL 1.22.9-90002.1.3.2 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update golang-github-QubitProducts-exporter_exporter 0.4.0-90002.3.6.4 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update golang-github-lusitaniae-apache_exporter 1.0.10-90002.3.9.4 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update golang-github-prometheus-node_exporter 1.10.2-90002.3.3.4 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update golang-github-prometheus-promu 0.17.0-90002.3.6.3 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update golang-packaging 15.0.17-90002.3.3.1 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update prometheus-postgres_exporter 0.10.1-90002.3.3.4 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundle-libsodium 1.0.21-90002.3.3.1 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundle-swig 4.1.1-90002.3.3.1 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundle-zeromq 4.3.5-90002.3.9.1 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy +1 3.11.15-90002.4.12.2 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-docker 7.1.0-90002.4.3.2 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-lxml 6.0.2-90002.3.6.2 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-m2crypto 0.45.1-90002.3.14.1 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-passlib +1 1.7.4-90002.3.9.2 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pynacl 1.5.0-90002.3.6.2 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-pyopenssl 23.2.0-90002.3.6.1 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-requests 2.33.1-90002.4.3.2 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-tornado 6.3.2-90002.4.9.2 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-urllib3 2.0.7-90002.3.3.1 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update saltbundlepy-wheel +1 0.45.1-90002.3.8.1 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update scap-security-guide 0.1.79-90002.3.9.1 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update spacecmd 5.2.8-90002.3.12.1 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update uyuni-tools 5.2.12-90002.3.12.1 SUSE-SU-2026:2763-1
SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update venv-salt-minion 3006.0-90002.5.19.1 SUSE-SU-2026:2763-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed amazon-ssm-agent 3.3.1957.0-2.1 openSUSE-SU-2025:14867-1
openSUSE Tumbleweed apptainer 1.3.6-5.1 openSUSE-SU-2025:14909-1
openSUSE Tumbleweed cheat 4.4.2-2.1 openSUSE-SU-2025:15487-1
openSUSE Tumbleweed containerized-data-importer1.65 1.65.0-2.1 openSUSE-SU-2026:11305-1
openSUSE Tumbleweed cosign 2.5.0-1.1 openSUSE-SU-2025:14988-1
openSUSE Tumbleweed go1.23 1.23.7-1.1 openSUSE-SU-2025:14855-1
openSUSE Tumbleweed go1.24 1.24.1-1.1 openSUSE-SU-2025:14856-1
openSUSE Tumbleweed golang-github-prometheus-alertmanager 0.28.1-2.1 openSUSE-SU-2025:15178-1
openSUSE Tumbleweed golang-github-prometheus-node_exporter 1.9.1-2.1 openSUSE-SU-2025:15041-1
openSUSE Tumbleweed govulncheck-vulndb 0.0.20250312T181707-1.1 openSUSE-SU-2025:14889-1
openSUSE Tumbleweed grafana 11.6.1-1.1 openSUSE-SU-2025:15145-1
openSUSE Tumbleweed helm 3.17.2-1.1 openSUSE-SU-2025:14906-1
openSUSE Tumbleweed helm3 3.19.2-1.1 openSUSE-SU-2025:15779-1
openSUSE Tumbleweed opa 1.6.0-1.1 openSUSE-SU-2025:15253-1
openSUSE Tumbleweed prometheus-blackbox_exporter 0.24.0-3.1 openSUSE-SU-2025:15162-1
openSUSE Tumbleweed rclone 1.69.2-1.1 openSUSE-SU-2025:15054-1
openSUSE Tumbleweed teleport 17.3.3-1.1 openSUSE-SU-2025:14863-1
openSUSE Tumbleweed velociraptor 0.7.0.4.git185.a5708584-2.1 openSUSE-SU-2026:11126-1
openSUSE Tumbleweed vexctl 0.4.1+git78.f951e3a-1.1 openSUSE-SU-2026:10230-1
openSUSE Tumbleweed warewulf4 4.6.0-2.1 openSUSE-SU-2025:14918-1
openSUSE Leap 16.0 amazon-ssm-agent 3.3.4624.0-160000.1.1 openSUSE-SU-2026:21079-1
openSUSE Leap 16.0 cheat 4.4.2-bp160.2.1 openSUSE-SU-2025:20177-1
openSUSE Leap 16.0 containerized-data-importer1.65 1.65.0-160000.3.1 openSUSE-SU-2026:21824-1
openSUSE Leap 16.0 golang-github-prometheus-alertmanager 0.28.1-bp160.1.1 openSUSE-SU-2026:21136-1
openSUSE Leap 16.0 govulncheck-vulndb 0.0.20260723T184607-160000.1.1 openSUSE-SU-2026:21483-1
openSUSE Leap 16.0 prometheus-blackbox_exporter 0.26.0-bp160.1.1 openSUSE-SU-2026:22026-1
openSUSE Leap 16.0 vexctl 0.4.4+git20.5d61136-160000.1.1 openSUSE-SU-2026:21481-1
openSUSE Leap 15.6 amazon-ssm-agent 3.3.1611.0-150000.5.23.1 SUSE-SU-2025:0873-1
openSUSE Leap 15.6 apptainer 1.3.6-150600.4.9.1 SUSE-SU-2026:0439-1, SUSE-SU-2025:0980-1
openSUSE Leap 15.6 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
openSUSE Leap 15.6 go1.23 1.23.7-150000.1.24.1 SUSE-SU-2025:0803-1
openSUSE Leap 15.6 go1.23-openssl 1.23.12-150600.13.9.1 SUSE-SU-2025:03159-1
openSUSE Leap 15.6 go1.24 1.24.1-150000.1.12.1 SUSE-SU-2025:0802-1
openSUSE Leap 15.6 golang-github-prometheus-alertmanager 0.26.0-150100.4.25.2 SUSE-SU-2025:01992-1
openSUSE Leap 15.6 golang-github-prometheus-node_exporter 1.9.1-150100.3.35.2 SUSE-SU-2025:01988-1
openSUSE Leap 15.6 golang-github-prometheus-prometheus 2.53.4-150100.4.26.2 SUSE-SU-2025:01990-1
openSUSE Leap 15.6 grafana 11.5.5-150200.3.72.2 SUSE-SU-2025:01991-1
openSUSE Leap 15.6 helm 3.17.2-150000.1.44.1 SUSE-SU-2025:1007-1
openSUSE Leap 15.6 ignition 2.14.0-150400.9.9.1 SUSE-SU-2025:02014-1
openSUSE Leap 15.6 prometheus-blackbox_exporter 0.26.0-150000.1.27.1 SUSE-SU-2025:01989-1
openSUSE Leap 15.6 skopeo 1.14.4-150300.11.22.1 SUSE-SU-2025:1055-1
openSUSE Leap 15.6 squashfuse 0.5.0-150600.3.2.1 SUSE-SU-2026:0439-1
openSUSE Leap 15.6 vexctl 0.4.1+git78.f951e3a-150000.1.11.1 SUSE-SU-2026:0592-1
openSUSE Leap 15.6 warewulf4 4.6.0-150500.6.34.1 SUSE-SU-2025:1094-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 go 1.24.1-r0 —
Alpine v3.24 rclone 1.69.2-r0 —
Alpine v3.23 go 1.24.1-r0 —
Alpine v3.23 rclone 1.69.2-r0 —
Alpine v3.22 go 1.24.1-r0 —
Alpine v3.22 rclone 1.69.2-r0 —
Alpine v3.21 go 1.23.7-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 golang +6 1.24.1-1.amzn2023.0.1 ALAS2023-2025-913
Amazon Linux 2 golang +6 1.23.7-1.amzn2.0.1 ALAS2-2025-2795

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 azcopy 10.25.1-4 —
Azure Linux 3 git-lfs 3.6.1-2 —
Azure Linux 3 golang No fix yet —
Azure Linux 3 influxdb 2.7.5-4 —
Azure Linux 3 keda 2.14.1-7 —
Azure Linux 3 packer 1.9.5-9 —
Azure Linux 3 prometheus 2.45.4-12 —
Azure Linux 3 prometheus-node-exporter 1.7.0-3 —
Azure Linux 3 prometheus-process-exporter 0.8.2-2 —
Azure Linux 3 telegraf 1.31.0-7 —
Azure Linux 3 vitess 19.0.4-7 —
Azure Linux 2 (CBL-Mariner) azcopy 10.25.1-5 —
Azure Linux 2 (CBL-Mariner) git-lfs 3.5.1-5 —
Azure Linux 2 (CBL-Mariner) golang 1.18.8-8 —
Azure Linux 2 (CBL-Mariner) influxdb 2.6.1-22 —
Azure Linux 2 (CBL-Mariner) keda 2.4.0-29 —
Azure Linux 2 (CBL-Mariner) packer 1.9.5-12 —
Azure Linux 2 (CBL-Mariner) telegraf 1.29.4-15 —
Azure Linux 2 (CBL-Mariner) vitess 17.0.7-7 —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r28 —
Wolfi rolling actions-runner-controller +1 0.10.1-r6 —
Wolfi rolling addon-resizer +1 1.8.23-r3 —
Wolfi rolling amazon-cloudwatch-agent +6 1.300054.0-r1 —
Wolfi rolling amazon-cloudwatch-agent-operator +1 2.2.0-r1 —
Wolfi rolling amazon-k8s-cni +3 1.19.3-r2 —
Wolfi rolling apko 0.25.5-r0 —
Wolfi rolling argo-events 1.9.5-r5 —
Wolfi rolling argo-rollouts +1 1.8.0-r33 —
Wolfi rolling argo-workflows 3.6.5-r1 —
Wolfi rolling argocd-image-updater +1 0.15.2-r8 —
Wolfi rolling atlantis 0.33.0-r4 —
Wolfi rolling aws-application-networking-k8s +1 1.1.0-r5 —
Wolfi rolling aws-efs-csi-driver 2.1.6-r2 —
Wolfi rolling aws-load-balancer-controller +1 2.12.0-r1 —
Wolfi rolling aws-s3-controller 1.0.27-r32 —
Wolfi rolling azcopy 10.28.0-r4 —
Wolfi rolling bank-vaults +1 1.20.4-r27 —
Wolfi rolling bom 0.6.0-r18 —
Wolfi rolling boring-registry 0.16.3-r1 —
Wolfi rolling buildah 1.39.2-r32 —
Wolfi rolling buildctl +1 0.20.1-r2 —
Wolfi rolling caddy +2 2.9.1-r7 —
Wolfi rolling cadvisor +1 0.52.1-r3 —
Wolfi rolling cass-operator +2 1.23.0-r5 —
Wolfi rolling cert-exporter 2.14.0-r9 —
Wolfi rolling cert-manager-cmctl 2.1.1-r8 —
Wolfi rolling cert-manager-istio-csr +1 0.14.0-r6 —
Wolfi rolling cert-manager-webhook-pdns 2.5.2-r3 —
Wolfi rolling certificate-transparency +1 1.3.1-r5 —
Wolfi rolling cfssl +7 1.6.5-r17 —
Wolfi rolling chartmuseum 0.16.2-r14 —
Wolfi rolling cilium-cli 0.18.2-r1 —
Wolfi rolling cloud-provider-aws-1.31 +2 1.31.5-r33 —
Wolfi rolling cloud-provider-gcp-cloud-controller-manager +1 33.1.1-r1 —
Wolfi rolling cloudflared 2025.2.1-r3 —
Wolfi rolling cloudnative-pg +1 1.25.1-r31 —
Wolfi rolling cloudprober +1 0.13.9-r4 —
Wolfi rolling cluster-api-aws-controller +1 2.8.4-r1 —
Wolfi rolling cluster-proportional-autoscaler +1 1.9.1-r2 —
Wolfi rolling cni-plugins +42 1.6.2-r3 —
Wolfi rolling conftest 0.58.0-r2 —
Wolfi rolling controller-gen 0.17.2-r1 —
Wolfi rolling cortex 1.19.0-r3 —
Wolfi rolling cosign 2.4.3-r5 —
Wolfi rolling crictl +2 1.32.0-r6 —
Wolfi rolling croc 10.2.1-r4 —
Wolfi rolling crossplane-crank 1.19.0-r4 —
Wolfi rolling crossplane-provider-aws +38 1.21.0-r3 —
Wolfi rolling crossplane-provider-keycloak 1.7.0-r9 —
Wolfi rolling crossplane-provider-sql 0.11.0-r5 —
Wolfi rolling ctr-1 +4 1.7.26-r4 —
Wolfi rolling ctr-2 +4 2.0.3-r3 —
Wolfi rolling cue +3 0.12.0-r2 —
Wolfi rolling dagdotdev 0.0.13-r4 —
Wolfi rolling dbmate 2.26.0-r3 —
Wolfi rolling descheduler 0.32.2-r33 —
Wolfi rolling dex +1 2.42.0-r4 —
Wolfi rolling dgraph 24.1.0-r1 —
Wolfi rolling distribution 3.0.0-r33 —
Wolfi rolling dive 0.12.0-r16 —
Wolfi rolling docker-cli-buildx 0.21.2-r3 —
Wolfi rolling docker-compose 2.33.1-r3 —
Wolfi rolling docker-dind 28.0.1-r3 —
Wolfi rolling dockerize 0.9.2-r4 —
Wolfi rolling doppler-kubernetes-operator 1.5.7-r2 —
Wolfi rolling dynamic-localpv-provisioner 4.2.0-r3 —
Wolfi rolling eksctl 0.205.0-r3 —
Wolfi rolling emissary +6 3.9.1-r13 —
Wolfi rolling envoy-gateway +2 1.3.1-r1 —
Wolfi rolling envoy-ratelimit 0.0.0_git20250314-r0 —
Wolfi rolling falco-exporter 0.8.7-r4 —
Wolfi rolling falcoctl 0.11.0-r6 —
Wolfi rolling falcosidekick 2.31.1-r4 —
Wolfi rolling filebrowser +1 2.32.0-r3 —
Wolfi rolling flannel +1 0.26.5-r3 —
Wolfi rolling fluent-bit-plugin-loki 3.4.2-r3 —
Wolfi rolling fluent-watcher +3 3.2.0-r8 —
Wolfi rolling flux 2.5.1-r3 —
Wolfi rolling flux-helm-controller +1 1.2.0-r3 —
Wolfi rolling flux-image-automation-controller +2 0.40.0-r3 —
Wolfi rolling flux-image-reflector-controller +1 0.34.0-r3 —
Wolfi rolling flux-kustomize-controller +1 1.5.1-r2 —
Wolfi rolling flux-notification-controller +1 1.5.0-r3 —
Wolfi rolling flux-source-controller +1 1.5.0-r6 —
Wolfi rolling flyte 1.15.0-r4 —
Wolfi rolling fq 0.14.0-r2 —
Wolfi rolling frp 0.61.2-r1 —
Wolfi rolling fulcio 1.6.6-r6 —
Wolfi rolling fuse-overlayfs-snapshotter 2.1.1-r1 —
Wolfi rolling gatus +1 5.16.0-r4 —
Wolfi rolling gcsfuse 1.4.2-r18 —
Wolfi rolling gh +1 2.68.1-r2 —
Wolfi rolling git-lfs +1 3.6.1-r4 —
Wolfi rolling gitness 3.1.1-r5 —
Wolfi rolling gitsign +2 0.12.0-r8 —
Wolfi rolling gke-gcloud-auth-plugin 0.1.0-r4 —
Wolfi rolling glab 1.53.0-r3 —
Wolfi rolling glow 2.1.0-r1 —
Wolfi rolling go-discover 0_git20250314-r0 —
Wolfi rolling go-licenses 1.6.0-r24 —
Wolfi rolling gptscript 0.9.5-r8 —
Wolfi rolling grafana-agent-operator 0.44.5-r1 —
Wolfi rolling grafana-alloy 1.7.4-r1 —
Wolfi rolling grafana-operator +1 5.17.0-r1 —
Wolfi rolling grafana-rollout-operator 0.24.0-r32 —
Wolfi rolling grpc-health-probe +1 0.4.37-r32 —
Wolfi rolling grpcurl 1.9.3-r1 —
Wolfi rolling guac +4 0.13.2-r5 —
Wolfi rolling harbor-registry 3.0.0_alpha1-r22 —
Wolfi rolling harbor-scanner-trivy 0.32.3-r4 —
Wolfi rolling hcloud 1.50.0-r4 —
Wolfi rolling helm-operator +1 1.39.1-r5 —
Wolfi rolling helm-push 0.10.4-r22 —
Wolfi rolling hey 0.1.4-r21 —
Wolfi rolling hubble +1 1.17.1-r2 —
Wolfi rolling hubble-ui +1 0.13.2-r2 —
Wolfi rolling hugo +1 0.145.0-r2 —
Wolfi rolling hydra 2.3.0-r5 —
Wolfi rolling ingress-nginx-controller-1.12 1.12.0-r14 —
Wolfi rolling ip-masq-agent 2.12.0-r6 —
Wolfi rolling jaeger-operator +1 1.65.0-r3 —
Wolfi rolling jitsucom-bulker +10 2.8.6-r4 —
Wolfi rolling k3d +2 5.8.3-r8 —
Wolfi rolling k3s-1.32 +2 1.32.7.1-r1 —
Wolfi rolling k3s-static 1.34.1.1-r2 —
Wolfi rolling k6 0.57.0-r2 —
Wolfi rolling k8s-device-plugin +3 0.17.1-r1 —
Wolfi rolling k8sgpt 0.4.0-r3 —
Wolfi rolling k8sgpt-operator +1 0.2.9-r2 —
Wolfi rolling k8ssandra-client +1 0.6.0-r7 —
Wolfi rolling k9s 0.40.10-r1 —
Wolfi rolling kaf 0.2.8-r13 —
Wolfi rolling kafka-proxy +1 0.4.1-r3 —
Wolfi rolling kafka_exporter 1.9.0-r32 —
Wolfi rolling kaniko +3 1.23.2-r13 —
Wolfi rolling kapp 0.64.0-r6 —
Wolfi rolling kapp-controller +1 0.55.1-r3 —
Wolfi rolling kargo +1 1.3.1-r2 —
Wolfi rolling kbld 0.45.0-r4 —
Wolfi rolling kiali 2.6.0-r3 —
Wolfi rolling kine 0.13.11-r0 —
Wolfi rolling knative-client 1.17.0-r3 —
Wolfi rolling ko 0.17.1-r9 —
Wolfi rolling kor 0.5.9-r3 —
Wolfi rolling kots +2 1.124.6-r0 —
Wolfi rolling kpt 1.0.0_beta55-r5 —
Wolfi rolling kserve +9 0.14.1-r7 —
Wolfi rolling kserve-modelmesh-serving +1 0.12.0-r9 —
Wolfi rolling ksops +1 4.3.3-r6 —
Wolfi rolling kube-bench +1 0.10.4-r2 —
Wolfi rolling kube-fluentd-operator +3 1.18.2-r32 —
Wolfi rolling kube-metrics-adapter 0.2.4-r2 —
Wolfi rolling kube-rbac-proxy 0.19.0-r3 —
Wolfi rolling kube-state-metrics +1 2.15.0-r6 —
Wolfi rolling kube-vip +1 0.8.9-r5 —
Wolfi rolling kubectl-1.29 +2 1.29.15-r2 —
Wolfi rolling kubectl-1.30 +2 1.30.11-r2 —
Wolfi rolling kubectl-1.31 +1 1.31.7-r2 —
Wolfi rolling kubectl-1.32 +1 1.32.3-r2 —
Wolfi rolling kubeflow +12 1.10.0-r4 —
Wolfi rolling kubeflow-katib +17 0.17.0-r13 —
Wolfi rolling kubeflow-pipelines +11 2.4.0-r8 —
Wolfi rolling kuberay-operator +3 1.3.0-r2 —
Wolfi rolling kuberlr 0.6.0-r2 —
Wolfi rolling kubernetes-csi-driver-hostpath 1.16.1-r1 —
Wolfi rolling kubernetes-csi-driver-nfs +1 4.10.0-r3 —
Wolfi rolling kubernetes-csi-external-attacher +1 4.8.1-r2 —
Wolfi rolling kubernetes-csi-external-provisioner 5.2.0-r4 —
Wolfi rolling kubernetes-csi-external-resizer 1.13.2-r2 —
Wolfi rolling kubernetes-csi-livenessprobe 2.15.0-r4 —
Wolfi rolling kubernetes-dashboard-api +11 1.11.1-r3 —
Wolfi rolling kubernetes-dashboard-auth +1 1.2.4-r3 —
Wolfi rolling kubernetes-dashboard-metrics-scraper +1 1.2.2-r5 —
Wolfi rolling kubernetes-dns-node-cache 1.25.0-r5 —
Wolfi rolling kubernetes-event-exporter +1 1.7-r19 —
Wolfi rolling kubescape 3.0.31-r2 —
Wolfi rolling kubevela +3 1.10.2-r3 —
Wolfi rolling kubewatch 2.9.0-r7 —
Wolfi rolling kwok +1 0.6.1-r7 —
Wolfi rolling kyverno-notation-aws +1 1.1-r9 —
Wolfi rolling kyverno-policy-reporter +1 3.0.7-r1 —
Wolfi rolling kyverno-policy-reporter-kyverno-plugin +1 1.6.4-r6 —
Wolfi rolling lazygit 0.48.0-r2 —
Wolfi rolling litefs 0.5.11-r12 —
Wolfi rolling litestream 0.3.13-r13 —
Wolfi rolling local-path-provisioner 0.0.31-r3 —
Wolfi rolling local-static-provisioner +3 2.7.0-r15 —
Wolfi rolling lvm-driver +1 1.6.2-r6 —
Wolfi rolling malcontent 1.8.8-r1 —
Wolfi rolling melange 0.22.2-r1 —
Wolfi rolling memcached-exporter +1 0.15.1-r3 —
Wolfi rolling metacontroller 4.11.22-r4 —
Wolfi rolling metallb +8 0.14.9-r6 —
Wolfi rolling metrics-server +2 0.7.2-r10 —
Wolfi rolling minio +1 0.20250312.180418-r1 —
Wolfi rolling minio-operator +3 7.0.0-r4 —
Wolfi rolling mkcert 1.4.4-r11 —
Wolfi rolling mods 1.7.0-r3 —
Wolfi rolling mongo-tools 100.11.0-r7 —
Wolfi rolling multus-cni +1 4.1.4-r5 —
Wolfi rolling nats 0.1.6-r4 —
Wolfi rolling nerdctl 2.0.3-r4 —
Wolfi rolling neuvector-scanner +2 3.788-r0 —
Wolfi rolling neuvector-sigstore-interface 0_git20250313-r9 —
Wolfi rolling newrelic-infra-operator 0.21.6-r2 —
Wolfi rolling newrelic-infrastructure-agent 1.62.0-r2 —
Wolfi rolling newrelic-nri-kube-events 2.11.8-r1 —
Wolfi rolling nfs-subdir-external-provisioner 4.0.18-r19 —
Wolfi rolling nginx-prometheus-exporter +1 1.4.1-r5 —
Wolfi rolling nodetaint 0.0.4-r30 —
Wolfi rolling nri-discovery-kubernetes +1 1.10.1-r2 —
Wolfi rolling nri-kafka +2 3.10.2-r2 —
Wolfi rolling nri-kubernetes 3.34.0-r1 —
Wolfi rolling nri-prometheus 2.24.1-r1 —
Wolfi rolling nsc 2.10.2-r5 —
Wolfi rolling nuclei 3.3.10-r3 —
Wolfi rolling oauth2-proxy +1 7.8.1-r4 —
Wolfi rolling octo-sts +1 0.4.2-r9 —
Wolfi rolling ollama +1 0.6.0-r1 —
Wolfi rolling op-geth +6 1.101500.1-r2 —
Wolfi rolling opa +2 1.2.0-r1 —
Wolfi rolling opa-envoy 1.2.0_p2-r1 —
Wolfi rolling openbao +1 2.2.0-r4 —
Wolfi rolling openbao-k8s +1 1.4.0-r34 —
Wolfi rolling opencost +1 1.114.0-r3 —
Wolfi rolling openfga +2 1.8.7-r1 —
Wolfi rolling opensearch-k8s-operator +1 2.7.0-r5 —
Wolfi rolling opentelemetry-collector +2 0.121.0-r2 —
Wolfi rolling opentelemetry-collector-contrib +1 0.121.0-r1 —
Wolfi rolling opentelemetry-operator +3 0.120.0-r3 —
Wolfi rolling opentofu-1.9 1.9.0-r7 —
Wolfi rolling osv-scanner 1.9.2-r5 —
Wolfi rolling otel-cli 0.4.5-r1 —
Wolfi rolling pluto +1 5.21.3-r2 —
Wolfi rolling policy-controller +1 0.12.0-r7 —
Wolfi rolling portieris +1 0.13.25-r2 —
Wolfi rolling postgres-operator +1 1.14.0-r5 —
Wolfi rolling prometheus-3.2 3.2.1-r3 —
Wolfi rolling prometheus-adapter 0.12.0-r10 —
Wolfi rolling prometheus-alertmanager +1 0.28.1-r2 —
Wolfi rolling promxy 0.0.92-r32 —
Wolfi rolling pulumi +3 3.156.0-r1 —
Wolfi rolling pulumi-kubernetes-operator 1.16.0-r13 —
Wolfi rolling pulumi-language-dotnet 3.76.1-r1 —
Wolfi rolling pulumi-language-java 1.6.0-r1 —
Wolfi rolling pulumi-language-yaml 1.14.1-r2 —
Wolfi rolling q 0.19.2-r15 —
Wolfi rolling rabbitmq-cluster-operator +2 2.12.1-r3 —
Wolfi rolling rabbitmq-messaging-topology-operator +2 1.16.0-r4 —
Wolfi rolling rancher-fleet +4 0.12.0-r0 —
Wolfi rolling rclone +1 1.69.1-r3 —
Wolfi rolling redis-operator +1 0.19.1-r2 —
Wolfi rolling rekor +3 1.3.9-r9 —
Wolfi rolling restic +1 0.17.3-r7 —
Wolfi rolling rook +1 1.16.5-r3 —
Wolfi rolling rootlesskit +1 2.3.4-r1 —
Wolfi rolling rqlite +1 8.36.13-r1 —
Wolfi rolling runc +1 1.2.5-r1 —
Wolfi rolling scorecard 5.1.1-r3 —
Wolfi rolling seaweedfs +2 3.85-r3 —
Wolfi rolling secrets-store-csi-driver +1 1.4.8-r4 —
Wolfi rolling secrets-store-csi-driver-provider-aws 0.3.11-r32 —
Wolfi rolling secrets-store-csi-driver-provider-azure 1.6.2-r32 —
Wolfi rolling secrets-store-csi-driver-provider-gcp 1.7.0-r6 —
Wolfi rolling sftpgo 2.6.6-r2 —
Wolfi rolling sftpgo-plugin-auth 1.0.11-r1 —
Wolfi rolling sftpgo-plugin-eventstore +1 1.0.20-r1 —
Wolfi rolling sftpgo-plugin-geoipfilter 1.0.10-r1 —
Wolfi rolling sftpgo-plugin-kms 1.0.15-r2 —
Wolfi rolling sftpgo-plugin-pubsub 1.0.14-r1 —
Wolfi rolling sigstore-scaffolding +13 0.7.21-r2 —
Wolfi rolling skaffold 2.14.1-r5 —
Wolfi rolling skopeo 1.18.0-r5 —
Wolfi rolling slsa-verifier 2.7.0-r3 —
Wolfi rolling smarter-device-manager 1.20.11-r15 —
Wolfi rolling snyk-cli 1.1295.4-r2 —
Wolfi rolling sonobuoy +1 0.57.3-r2 —
Wolfi rolling sops 3.9.4-r5 —
Wolfi rolling spark-operator +1 2.1.0-r8 —
Wolfi rolling spegel +1 0.0.30-r4 —
Wolfi rolling spicedb +1 1.41.0-r1 —
Wolfi rolling spiffe-helper +1 0.9.1-r4 —
Wolfi rolling spire-agent +2 1.11.2-r5 —
Wolfi rolling spire-controller-manager +1 0.6.1-r4 —
Wolfi rolling splunk-otel-collector +2 0.120.0-r4 —
Wolfi rolling spqr 2.4.0-r2 —
Wolfi rolling sql_exporter 0.17.1-r3 —
Wolfi rolling src 6.1.0-r3 —
Wolfi rolling src-fingerprint 0.19.0-r26 —
Wolfi rolling sriov-network-device-plugin +1 3.9.0-r4 —
Wolfi rolling step 0.28.5-r2 —
Wolfi rolling step-ca 0.28.2-r5 —
Wolfi rolling step-issuer +1 0.9.7-r7 —
Wolfi rolling step-kms-plugin 0.12.1-r4 —
Wolfi rolling stern 1.32.0-r3 —
Wolfi rolling syft 1.20.0-r3 —
Wolfi rolling tailscale +1 1.80.3-r3 —
Wolfi rolling task 3.42.1-r1 —
Wolfi rolling tdbg +9 1.27.1-r3 —
Wolfi rolling tekton-chains 0.24.0-r5 —
Wolfi rolling temporal +4 1.3.0-r3 —
Wolfi rolling temporal-ui-server +1 2.36.0-r3 —
Wolfi rolling terraform +2 1.5.7-r25 —
Wolfi rolling terraform-docs 0.19.0-r6 —
Wolfi rolling terraform-provider-azapi 2.3.0-r1 —
Wolfi rolling terraform-provider-azuread 3.2.0-r1 —
Wolfi rolling terraform-provider-azurerm 4.23.0-r0 —
Wolfi rolling terraform-provider-google 6.25.0-r2 —
Wolfi rolling terraform-provider-grafana 3.22.0-r1 —
Wolfi rolling terraform-provider-kubernetes 2.36.0-r1 —
Wolfi rolling terraform-provider-pagerduty 3.23.1-r1 —
Wolfi rolling terraform-provider-random 3.7.1-r1 —
Wolfi rolling terraform-provider-sendgrid 1.0.1-r1 —
Wolfi rolling terraform-provider-time 0.13.0-r1 —
Wolfi rolling terraform-provider-tls 4.0.6-r1 —
Wolfi rolling tflint +1 0.55.1-r5 —
Wolfi rolling tfsec 1.28.13-r5 —
Wolfi rolling thanos +1 0.37.2-r7 —
Wolfi rolling thanos-operator +1 0.3.7-r27 —
Wolfi rolling timestamp-authority +2 1.2.4-r6 —
Wolfi rolling timoni 0.24.0-r2 —
Wolfi rolling tkn 0.40.0-r4 —
Wolfi rolling traefik-3.3 3.3.4-r3 —
Wolfi rolling trillian +2 1.7.1-r5 —
Wolfi rolling trivy 0.60.0-r3 —
Wolfi rolling trust-manager 0.16.0-r2 —
Wolfi rolling undock 0.9.0-r5 —
Wolfi rolling vault-benchmark +1 0.3.0-r33 —
Wolfi rolling vault-k8s 1.6.2-r1 —
Wolfi rolling vcluster +2 0.23.0-r2 —
Wolfi rolling velero +2 1.15.2-r5 —
Wolfi rolling velero-plugin-for-aws +1 1.11.1-r32 —
Wolfi rolling velero-plugin-for-csi +1 0.7.1-r32 —
Wolfi rolling velero-plugin-for-microsoft-azure +1 1.11.1-r33 —
Wolfi rolling vexctl 0.3.0-r10 —
Wolfi rolling victoriametrics +18 1.113.0-r1 —
Wolfi rolling volume-modifier-for-k8s 0.5.1-r4 —
Wolfi rolling wal-g +1 3.0.7-r2 —
Wolfi rolling wave 0.10.0-r5 —
Wolfi rolling weaviate 1.29.1-r0 —
Wolfi rolling whereabouts +1 0.8.0-r6 —
Wolfi rolling wireguard-go 0.0.20230223-r22 —
Wolfi rolling wuzz 0.5.0-r6 —
Wolfi rolling x509-certificate-exporter +1 3.18.1-r5 —
Wolfi rolling xeol +1 0.10.8-r3 —
Wolfi rolling yq 4.45.1-r3 —
Wolfi rolling yunikorn-k8shim +1 1.6.1-r4 —
Wolfi rolling zarf 0.49.1-r2 —
Wolfi rolling zot 2.1.2-r6 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • JoshuaProvoste/CVE-2025-22870 ★ 2 · Jun 8, 2025

    Proof-of-concept for CVE-2025-22870 demonstrating HTTP proxy bypass in vulnerable versions (<0.36.0) of golang.org/x/net/http/httpproxy. Exploits improper IPv6 zone ID parsing to evade NO_PROXY restr…

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

EcosystemPackageAffectedFixedRecord
Go golang.org/x/net < 0.36.0 0.36.0 GHSA-qxp5-gwg8-xv66
Go stdlib < 1.23.7 · >= 1.24.0-0, < 1.24.1 1.23.7, 1.24.1 GO-2025-3503

Advisories 50

References