Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2025-6690 | HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net |
Github GHSA |
GHSA-qxp5-gwg8-xv66 | HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net |
Ubuntu USN |
USN-7574-1 | Go vulnerabilities |
Thu, 16 Apr 2026 22:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Sat, 12 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Thu, 15 May 2025 06:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat
Redhat openshift Data Foundation |
|
| CPEs | cpe:/a:redhat:openshift_data_foundation:4.18::el9 | |
| Vendors & Products |
Redhat
Redhat openshift Data Foundation |
Fri, 09 May 2025 20:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Tue, 18 Mar 2025 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-115 | |
| Metrics |
ssvc
|
Fri, 14 Mar 2025 02:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-20 | |
| References |
| |
| Metrics |
threat_severity
|
cvssV3_1
|
Wed, 12 Mar 2025 19:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Wed, 12 Mar 2025 18:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied. | |
| Title | HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net | |
| References |
|
Status: PUBLISHED
Assigner: Go
Published:
Updated: 2026-04-16T22:39:33.619Z
Reserved: 2025-01-08T19:11:42.834Z
Link: CVE-2025-22870
Updated: 2025-05-09T20:03:37.043Z
Status : Deferred
Published: 2025-03-12T19:15:38.310
Modified: 2026-04-16T23:16:32.860
Link: CVE-2025-22870
OpenCVE Enrichment
Updated: 2026-04-20T16:00:10Z
EUVD
Github GHSA
Ubuntu USN