Количество 27
Количество 27
CVE-2026-39825
ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery. ReverseProxy does not take ParseQuery's limit on the total number of query parameters (controlled by GODEBUG=urlmaxqueryparams=N) into account. This can permit ReverseProxy to forward a request containing a query parameter that is not visible to the Rewrite function. For example, the query "a1=x&a2=x&...&a10000=x&hidden=y" can forward the parameter "hidden=y" while hiding it from the proxy's Rewrite function.
CVE-2026-39825
ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery. ReverseProxy does not take ParseQuery's limit on the total number of query parameters (controlled by GODEBUG=urlmaxqueryparams=N) into account. This can permit ReverseProxy to forward a request containing a query parameter that is not visible to the Rewrite function. For example, the query "a1=x&a2=x&...&a10000=x&hidden=y" can forward the parameter "hidden=y" while hiding it from the proxy's Rewrite function.
CVE-2026-39825
ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery. ReverseProxy does not take ParseQuery's limit on the total number of query parameters (controlled by GODEBUG=urlmaxqueryparams=N) into account. This can permit ReverseProxy to forward a request containing a query parameter that is not visible to the Rewrite function. For example, the query "a1=x&a2=x&...&a10000=x&hidden=y" can forward the parameter "hidden=y" while hiding it from the proxy's Rewrite function.
CVE-2026-39825
ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil
CVE-2026-39825
ReverseProxy can forward queries containing parameters not visible to ...
GHSA-h74g-238j-357m
ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery. ReverseProxy does not take ParseQuery's limit on the total number of query parameters (controlled by GODEBUG=urlmaxqueryparams=N) into account. This can permit ReverseProxy to forward a request containing a query parameter that is not visible to the Rewrite function. For example, the query "a1=x&a2=x&...&a10000=x&hidden=y" can forward the parameter "hidden=y" while hiding it from the proxy's Rewrite function.
BDU:2026-08060
Уязвимость встроенного обратного прокси-сервера языка программирования Go, позволяющая нарушителю осуществить SSRF-атаку
ROS-20260710-80-0011
Уязвимость mimir
ROS-20260710-73-0011
Уязвимость mimir
ROS-20260622-80-0043
Уязвимость golang
ROS-20260622-73-0037
Уязвимость golang
openSUSE-SU-2026:20763-1
Security update for go1.25
openSUSE-SU-2026:20762-1
Security update for go1.26
SUSE-SU-2026:2093-1
Security update for go1.25-openssl
SUSE-SU-2026:2092-1
Security update for go1.26-openssl
SUSE-SU-2026:2079-1
Security update for go1.25-openssl
SUSE-SU-2026:2078-1
Security update for go1.26-openssl
SUSE-SU-2026:1862-1
Security update for go1.25
SUSE-SU-2026:1861-1
Security update for go1.26
RLSA-2026:22121
Important: golang security update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-39825 ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery. ReverseProxy does not take ParseQuery's limit on the total number of query parameters (controlled by GODEBUG=urlmaxqueryparams=N) into account. This can permit ReverseProxy to forward a request containing a query parameter that is not visible to the Rewrite function. For example, the query "a1=x&a2=x&...&a10000=x&hidden=y" can forward the parameter "hidden=y" while hiding it from the proxy's Rewrite function. | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
 | CVE-2026-39825 ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery. ReverseProxy does not take ParseQuery's limit on the total number of query parameters (controlled by GODEBUG=urlmaxqueryparams=N) into account. This can permit ReverseProxy to forward a request containing a query parameter that is not visible to the Rewrite function. For example, the query "a1=x&a2=x&...&a10000=x&hidden=y" can forward the parameter "hidden=y" while hiding it from the proxy's Rewrite function. | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
 | CVE-2026-39825 ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery. ReverseProxy does not take ParseQuery's limit on the total number of query parameters (controlled by GODEBUG=urlmaxqueryparams=N) into account. This can permit ReverseProxy to forward a request containing a query parameter that is not visible to the Rewrite function. For example, the query "a1=x&a2=x&...&a10000=x&hidden=y" can forward the parameter "hidden=y" while hiding it from the proxy's Rewrite function. | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
 | CVE-2026-39825 ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil | 0% Низкий | 4 месяца назад | |
| CVE-2026-39825 ReverseProxy can forward queries containing parameters not visible to ... | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
| GHSA-h74g-238j-357m ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery. ReverseProxy does not take ParseQuery's limit on the total number of query parameters (controlled by GODEBUG=urlmaxqueryparams=N) into account. This can permit ReverseProxy to forward a request containing a query parameter that is not visible to the Rewrite function. For example, the query "a1=x&a2=x&...&a10000=x&hidden=y" can forward the parameter "hidden=y" while hiding it from the proxy's Rewrite function. | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
 | BDU:2026-08060 Уязвимость встроенного обратного прокси-сервера языка программирования Go, позволяющая нарушителю осуществить SSRF-атаку | CVSS3: 5.3 | 0% Низкий | 5 месяцев назад |
 | ROS-20260710-80-0011 Уязвимость mimir | CVSS3: 5.3 | 0% Низкий | 2 месяца назад |
| ROS-20260710-73-0011 Уязвимость mimir | CVSS3: 5.3 | 0% Низкий | 2 месяца назад |
| ROS-20260622-80-0043 Уязвимость golang | CVSS3: 5.3 | 0% Низкий | 3 месяца назад |
| ROS-20260622-73-0037 Уязвимость golang | CVSS3: 5.3 | 0% Низкий | 3 месяца назад |
 | openSUSE-SU-2026:20763-1 Security update for go1.25 | 4 месяца назад | ||
| openSUSE-SU-2026:20762-1 Security update for go1.26 | 4 месяца назад | ||
| SUSE-SU-2026:2093-1 Security update for go1.25-openssl | 4 месяца назад | ||
| SUSE-SU-2026:2092-1 Security update for go1.26-openssl | 4 месяца назад | ||
| SUSE-SU-2026:2079-1 Security update for go1.25-openssl | 4 месяца назад | ||
| SUSE-SU-2026:2078-1 Security update for go1.26-openssl | 4 месяца назад | ||
| SUSE-SU-2026:1862-1 Security update for go1.25 | 4 месяца назад | ||
| SUSE-SU-2026:1861-1 Security update for go1.26 | 4 месяца назад | ||
 | RLSA-2026:22121 Important: golang security update | 19 дней назад |
Уязвимостей на страницу