Количество 22
Количество 22
GHSA-h74g-238j-357m
ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery. ReverseProxy does not take ParseQuery's limit on the total number of query parameters (controlled by GODEBUG=urlmaxqueryparams=N) into account. This can permit ReverseProxy to forward a request containing a query parameter that is not visible to the Rewrite function. For example, the query "a1=x&a2=x&...&a10000=x&hidden=y" can forward the parameter "hidden=y" while hiding it from the proxy's Rewrite function.
CVE-2026-39825
ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery. ReverseProxy does not take ParseQuery's limit on the total number of query parameters (controlled by GODEBUG=urlmaxqueryparams=N) into account. This can permit ReverseProxy to forward a request containing a query parameter that is not visible to the Rewrite function. For example, the query "a1=x&a2=x&...&a10000=x&hidden=y" can forward the parameter "hidden=y" while hiding it from the proxy's Rewrite function.
CVE-2026-39825
ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery. ReverseProxy does not take ParseQuery's limit on the total number of query parameters (controlled by GODEBUG=urlmaxqueryparams=N) into account. This can permit ReverseProxy to forward a request containing a query parameter that is not visible to the Rewrite function. For example, the query "a1=x&a2=x&...&a10000=x&hidden=y" can forward the parameter "hidden=y" while hiding it from the proxy's Rewrite function.
CVE-2026-39825
ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery. ReverseProxy does not take ParseQuery's limit on the total number of query parameters (controlled by GODEBUG=urlmaxqueryparams=N) into account. This can permit ReverseProxy to forward a request containing a query parameter that is not visible to the Rewrite function. For example, the query "a1=x&a2=x&...&a10000=x&hidden=y" can forward the parameter "hidden=y" while hiding it from the proxy's Rewrite function.
CVE-2026-39825
ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil
CVE-2026-39825
ReverseProxy can forward queries containing parameters not visible to ...
BDU:2026-08060
Уязвимость встроенного обратного прокси-сервера языка программирования Go, позволяющая нарушителю осуществить SSRF-атаку
ROS-20260710-73-0011
Уязвимость mimir
ROS-20260622-73-0037
Уязвимость golang
openSUSE-SU-2026:20763-1
Security update for go1.25
openSUSE-SU-2026:20762-1
Security update for go1.26
SUSE-SU-2026:2093-1
Security update for go1.25-openssl
SUSE-SU-2026:2092-1
Security update for go1.26-openssl
SUSE-SU-2026:2079-1
Security update for go1.25-openssl
SUSE-SU-2026:2078-1
Security update for go1.26-openssl
SUSE-SU-2026:1862-1
Security update for go1.25
SUSE-SU-2026:1861-1
Security update for go1.26
ELSA-2026-22121
ELSA-2026-22121: golang security update (IMPORTANT)
ELSA-2026-22120
ELSA-2026-22120: golang security update (IMPORTANT)
ELSA-2026-22112
ELSA-2026-22112: go-toolset:ol8 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-h74g-238j-357m ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery. ReverseProxy does not take ParseQuery's limit on the total number of query parameters (controlled by GODEBUG=urlmaxqueryparams=N) into account. This can permit ReverseProxy to forward a request containing a query parameter that is not visible to the Rewrite function. For example, the query "a1=x&a2=x&...&a10000=x&hidden=y" can forward the parameter "hidden=y" while hiding it from the proxy's Rewrite function. | CVSS3: 5.3 | 0% Низкий | 3 месяца назад |
 | CVE-2026-39825 ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery. ReverseProxy does not take ParseQuery's limit on the total number of query parameters (controlled by GODEBUG=urlmaxqueryparams=N) into account. This can permit ReverseProxy to forward a request containing a query parameter that is not visible to the Rewrite function. For example, the query "a1=x&a2=x&...&a10000=x&hidden=y" can forward the parameter "hidden=y" while hiding it from the proxy's Rewrite function. | CVSS3: 5.3 | 0% Низкий | 3 месяца назад |
 | CVE-2026-39825 ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery. ReverseProxy does not take ParseQuery's limit on the total number of query parameters (controlled by GODEBUG=urlmaxqueryparams=N) into account. This can permit ReverseProxy to forward a request containing a query parameter that is not visible to the Rewrite function. For example, the query "a1=x&a2=x&...&a10000=x&hidden=y" can forward the parameter "hidden=y" while hiding it from the proxy's Rewrite function. | CVSS3: 6.5 | 0% Низкий | 3 месяца назад |
 | CVE-2026-39825 ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery. ReverseProxy does not take ParseQuery's limit on the total number of query parameters (controlled by GODEBUG=urlmaxqueryparams=N) into account. This can permit ReverseProxy to forward a request containing a query parameter that is not visible to the Rewrite function. For example, the query "a1=x&a2=x&...&a10000=x&hidden=y" can forward the parameter "hidden=y" while hiding it from the proxy's Rewrite function. | CVSS3: 5.3 | 0% Низкий | 3 месяца назад |
 | CVE-2026-39825 ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil | 0% Низкий | 3 месяца назад | |
| CVE-2026-39825 ReverseProxy can forward queries containing parameters not visible to ... | CVSS3: 5.3 | 0% Низкий | 3 месяца назад |
 | BDU:2026-08060 Уязвимость встроенного обратного прокси-сервера языка программирования Go, позволяющая нарушителю осуществить SSRF-атаку | CVSS3: 5.3 | 0% Низкий | 3 месяца назад |
 | ROS-20260710-73-0011 Уязвимость mimir | CVSS3: 5.3 | 0% Низкий | 21 день назад |
| ROS-20260622-73-0037 Уязвимость golang | CVSS3: 5.3 | 0% Низкий | около 1 месяца назад |
 | openSUSE-SU-2026:20763-1 Security update for go1.25 | 2 месяца назад | ||
| openSUSE-SU-2026:20762-1 Security update for go1.26 | 2 месяца назад | ||
| SUSE-SU-2026:2093-1 Security update for go1.25-openssl | 2 месяца назад | ||
| SUSE-SU-2026:2092-1 Security update for go1.26-openssl | 2 месяца назад | ||
| SUSE-SU-2026:2079-1 Security update for go1.25-openssl | 2 месяца назад | ||
| SUSE-SU-2026:2078-1 Security update for go1.26-openssl | 2 месяца назад | ||
| SUSE-SU-2026:1862-1 Security update for go1.25 | 3 месяца назад | ||
| SUSE-SU-2026:1861-1 Security update for go1.26 | 3 месяца назад | ||
| ELSA-2026-22121 ELSA-2026-22121: golang security update (IMPORTANT) | около 1 месяца назад | ||
| ELSA-2026-22120 ELSA-2026-22120: golang security update (IMPORTANT) | 10 дней назад | ||
| ELSA-2026-22112 ELSA-2026-22112: go-toolset:ol8 security update (IMPORTANT) | около 2 месяцев назад |
Уязвимостей на страницу