PT-2025-42736 · Golang+4 · Golang+4

CVE-2025-47912

·

Published

2025-01-01

·

Updated

2026-08-24

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions golang versions 1.15 golang versions 1.19
Description The net/url package does not properly validate bracketed IPv6 hostnames. This can lead to issues when parsing URLs containing IPv6 addresses enclosed in brackets.
Recommendations Update to a newer version of golang that contains a fix for this vulnerability.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-1286

Related Identifiers

ALT-PU-2025-12749
ALT-PU-2025-13232
AZL-78905
AZL-98817
BDU:2025-14527
BIT-GOLANG-2025-47912
CLEANSTART-2025-EU07511
CLEANSTART-2026-BI19096
CLEANSTART-2026-CL67452
CLEANSTART-2026-DG85765
CLEANSTART-2026-DK89443
CLEANSTART-2026-DX24417
CLEANSTART-2026-EH36582
CLEANSTART-2026-ES72297
CLEANSTART-2026-GK50991
CLEANSTART-2026-HO16255
CLEANSTART-2026-HP74907
CLEANSTART-2026-IC09970
CLEANSTART-2026-JL47330
CLEANSTART-2026-JV11945
CLEANSTART-2026-JW97006
CLEANSTART-2026-JY65496
CLEANSTART-2026-KF61159
CLEANSTART-2026-KK19266
CLEANSTART-2026-KL41807
CLEANSTART-2026-KQ90880
CLEANSTART-2026-LA96053
CLEANSTART-2026-LC57158
CLEANSTART-2026-LD38774
CLEANSTART-2026-LY84798
CLEANSTART-2026-MR40751
CLEANSTART-2026-MW42038
CLEANSTART-2026-NE76010
CLEANSTART-2026-OK95571
CLEANSTART-2026-OO10146
CLEANSTART-2026-PF69993
CLEANSTART-2026-PH30270
CLEANSTART-2026-PX55932
CLEANSTART-2026-QT53274
CLEANSTART-2026-RF77222
CLEANSTART-2026-RT37134
CLEANSTART-2026-RV11606
CLEANSTART-2026-RY70255
CLEANSTART-2026-SA78596
CLEANSTART-2026-SA81922
CLEANSTART-2026-SF49994
CLEANSTART-2026-SO47947
CLEANSTART-2026-ST87963
CLEANSTART-2026-TE81995
CLEANSTART-2026-TF97968
CLEANSTART-2026-UL50886
CLEANSTART-2026-UR38994
CLEANSTART-2026-VN16911
CLEANSTART-2026-VR76068
CLEANSTART-2026-VY69341
CLEANSTART-2026-WE55349
CLEANSTART-2026-WF25734
CLEANSTART-2026-WO16430
CLEANSTART-2026-WP03591
CLEANSTART-2026-WW79343
CLEANSTART-2026-WX54555
CLEANSTART-2026-XI63678
CLEANSTART-2026-XP01012
CLEANSTART-2026-XR35583
CLEANSTART-2026-XS86531
CLEANSTART-2026-XV43582
CLEANSTART-2026-XZ28830
CLEANSTART-2026-YT82900
CLEANSTART-2026-ZL51442
CLEANSTART-2026-ZN46983
CLEANSTART-2026-ZT09801
CLEANSTART-2026-ZU45532
CLEANSTART-2026-ZW09225
CVE-2025-47912
ECHO-EFA8-0654-2E47
GO-2025-4010
MGASA-2025-0256
OESA-2025-2782
OESA-2025-2783
OESA-2025-2826
OESA-2025-2827
OESA-2025-2828
OESA-2025-2868
OPENSUSE-SU-2025:15608-1
OPENSUSE-SU-2025:15609-1
OPENSUSE-SU-2025:15695-1
OPENSUSE-SU-2025:15703-1
OPENSUSE-SU-2025:15723-1
OPENSUSE-SU-2025:20157-1
OPENSUSE-SU-2025:20158-1
OPENSUSE-SU-2026:20301-1
OPENSUSE-SU-2026:20308-1
OPENSUSE-SU-2026:21483-1
RHSA-2026:7291
RHSA-2026:7385
SUSE-SU-2025:03547-1
SUSE-SU-2025:21192-1
SUSE-SU-2025:21193-1
SUSE-SU-2025:3682-1
SUSE-SU-2025_03547-1
SUSE-SU-2025_3682-1
SUSE-SU-2026:0296-1
SUSE-SU-2026:0297-1
SUSE-SU-2026:0298-1
SUSE-SU-2026:0308-1
SUSE-SU-2026:20623-1
SUSE-SU-2026:20629-1

Affected Products

Alt Linux
Debian
Red Os
Suse
Golang