PT-2025-45815

Published

2025-10-29

·

Updated

2025-10-29

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: "http://[::1]/". IPv4 addresses and hostnames must not appear within square brackets. Parse did not enforce this requirement.
Vendors
Affected products
Related identifiers
GO-2025-4010
Found an issue in the description? Have something to add? Feel free to write us 👾