CVE-2025-61726

Description

The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encoded forms. Parsing a large form containing many unique query parameters can cause excessive memory consumption.

References

https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61726.json

https://pkg.go.dev/vuln/GO-2026-4341

https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc

https://go.dev/issue/77101

https://go.dev/cl/736712

https://bugzilla.redhat.com/show_bug.cgi?id=2434432

https://access.redhat.com/security/cve/CVE-2025-61726

https://access.redhat.com/errata/RHSA-2026:9848

https://access.redhat.com/errata/RHSA-2026:9109

https://access.redhat.com/errata/RHSA-2026:9108

https://access.redhat.com/errata/RHSA-2026:9098

https://access.redhat.com/errata/RHSA-2026:9097

https://access.redhat.com/errata/RHSA-2026:8483

https://access.redhat.com/errata/RHSA-2026:8433

https://access.redhat.com/errata/RHSA-2026:8431

https://access.redhat.com/errata/RHSA-2026:8338

https://access.redhat.com/errata/RHSA-2026:8337

https://access.redhat.com/errata/RHSA-2026:8229

https://access.redhat.com/errata/RHSA-2026:8218

https://access.redhat.com/errata/RHSA-2026:8167

https://access.redhat.com/errata/RHSA-2026:8151

https://access.redhat.com/errata/RHSA-2026:7942

https://access.redhat.com/errata/RHSA-2026:7854

https://access.redhat.com/errata/RHSA-2026:7676

https://access.redhat.com/errata/RHSA-2026:7385

https://access.redhat.com/errata/RHSA-2026:7291

https://access.redhat.com/errata/RHSA-2026:7249

https://access.redhat.com/errata/RHSA-2026:7052

https://access.redhat.com/errata/RHSA-2026:6568

https://access.redhat.com/errata/RHSA-2026:6567

https://access.redhat.com/errata/RHSA-2026:6564

https://access.redhat.com/errata/RHSA-2026:6554

https://access.redhat.com/errata/RHSA-2026:6497

https://access.redhat.com/errata/RHSA-2026:6429

https://access.redhat.com/errata/RHSA-2026:6428

https://access.redhat.com/errata/RHSA-2026:6278

https://access.redhat.com/errata/RHSA-2026:6277

https://access.redhat.com/errata/RHSA-2026:6251

https://access.redhat.com/errata/RHSA-2026:6226

https://access.redhat.com/errata/RHSA-2026:6192

https://access.redhat.com/errata/RHSA-2026:6184

https://access.redhat.com/errata/RHSA-2026:5968

https://access.redhat.com/errata/RHSA-2026:5952

https://access.redhat.com/errata/RHSA-2026:5950

https://access.redhat.com/errata/RHSA-2026:5948

https://access.redhat.com/errata/RHSA-2026:5853

https://access.redhat.com/errata/RHSA-2026:5852

https://access.redhat.com/errata/RHSA-2026:5851

https://access.redhat.com/errata/RHSA-2026:5807

https://access.redhat.com/errata/RHSA-2026:5665

https://access.redhat.com/errata/RHSA-2026:5649

https://access.redhat.com/errata/RHSA-2026:5645

https://access.redhat.com/errata/RHSA-2026:5636

https://access.redhat.com/errata/RHSA-2026:5549

https://access.redhat.com/errata/RHSA-2026:5544

https://access.redhat.com/errata/RHSA-2026:5533

https://access.redhat.com/errata/RHSA-2026:5463

https://access.redhat.com/errata/RHSA-2026:5461

https://access.redhat.com/errata/RHSA-2026:5452

https://access.redhat.com/errata/RHSA-2026:5447

https://access.redhat.com/errata/RHSA-2026:5444

https://access.redhat.com/errata/RHSA-2026:5439

https://access.redhat.com/errata/RHSA-2026:5394

https://access.redhat.com/errata/RHSA-2026:5327

https://access.redhat.com/errata/RHSA-2026:5168

https://access.redhat.com/errata/RHSA-2026:5146

https://access.redhat.com/errata/RHSA-2026:5145

https://access.redhat.com/errata/RHSA-2026:5132

https://access.redhat.com/errata/RHSA-2026:5131

https://access.redhat.com/errata/RHSA-2026:5130

https://access.redhat.com/errata/RHSA-2026:5129

https://access.redhat.com/errata/RHSA-2026:5110

https://access.redhat.com/errata/RHSA-2026:5079

https://access.redhat.com/errata/RHSA-2026:5078

https://access.redhat.com/errata/RHSA-2026:5077

https://access.redhat.com/errata/RHSA-2026:5076

https://access.redhat.com/errata/RHSA-2026:5031

https://access.redhat.com/errata/RHSA-2026:5030

https://access.redhat.com/errata/RHSA-2026:5022

https://access.redhat.com/errata/RHSA-2026:4952

https://access.redhat.com/errata/RHSA-2026:4943

https://access.redhat.com/errata/RHSA-2026:4942

https://access.redhat.com/errata/RHSA-2026:4939

https://access.redhat.com/errata/RHSA-2026:4907

https://access.redhat.com/errata/RHSA-2026:4901

https://access.redhat.com/errata/RHSA-2026:4892

https://access.redhat.com/errata/RHSA-2026:4753

https://access.redhat.com/errata/RHSA-2026:4672

https://access.redhat.com/errata/RHSA-2026:4511

https://access.redhat.com/errata/RHSA-2026:4510

https://access.redhat.com/errata/RHSA-2026:4500

https://access.redhat.com/errata/RHSA-2026:4498

https://access.redhat.com/errata/RHSA-2026:4467

https://access.redhat.com/errata/RHSA-2026:4466

https://access.redhat.com/errata/RHSA-2026:4460

https://access.redhat.com/errata/RHSA-2026:4435

https://access.redhat.com/errata/RHSA-2026:4434

https://access.redhat.com/errata/RHSA-2026:4276

https://access.redhat.com/errata/RHSA-2026:4270

https://access.redhat.com/errata/RHSA-2026:4267

https://access.redhat.com/errata/RHSA-2026:4264

https://access.redhat.com/errata/RHSA-2026:4256

https://access.redhat.com/errata/RHSA-2026:4220

https://access.redhat.com/errata/RHSA-2026:4211

https://access.redhat.com/errata/RHSA-2026:4177

https://access.redhat.com/errata/RHSA-2026:4174

https://access.redhat.com/errata/RHSA-2026:4170

https://access.redhat.com/errata/RHSA-2026:4166

https://access.redhat.com/errata/RHSA-2026:4164

https://access.redhat.com/errata/RHSA-2026:3985

https://access.redhat.com/errata/RHSA-2026:3977

https://access.redhat.com/errata/RHSA-2026:3974

https://access.redhat.com/errata/RHSA-2026:3973

https://access.redhat.com/errata/RHSA-2026:3972

https://access.redhat.com/errata/RHSA-2026:3971

https://access.redhat.com/errata/RHSA-2026:3970

https://access.redhat.com/errata/RHSA-2026:3960

https://access.redhat.com/errata/RHSA-2026:3959

https://access.redhat.com/errata/RHSA-2026:3958

https://access.redhat.com/errata/RHSA-2026:3932

https://access.redhat.com/errata/RHSA-2026:3931

https://access.redhat.com/errata/RHSA-2026:3930

https://access.redhat.com/errata/RHSA-2026:3929

https://access.redhat.com/errata/RHSA-2026:3928

https://access.redhat.com/errata/RHSA-2026:3906

https://access.redhat.com/errata/RHSA-2026:3905

https://access.redhat.com/errata/RHSA-2026:3898

https://access.redhat.com/errata/RHSA-2026:3884

https://access.redhat.com/errata/RHSA-2026:3880

https://access.redhat.com/errata/RHSA-2026:3879

https://access.redhat.com/errata/RHSA-2026:3875

https://access.redhat.com/errata/RHSA-2026:3874

https://access.redhat.com/errata/RHSA-2026:3869

https://access.redhat.com/errata/RHSA-2026:3864

https://access.redhat.com/errata/RHSA-2026:3856

https://access.redhat.com/errata/RHSA-2026:3855

https://access.redhat.com/errata/RHSA-2026:3854

https://access.redhat.com/errata/RHSA-2026:3843

https://access.redhat.com/errata/RHSA-2026:3841

https://access.redhat.com/errata/RHSA-2026:3840

https://access.redhat.com/errata/RHSA-2026:3839

https://access.redhat.com/errata/RHSA-2026:3838

https://access.redhat.com/errata/RHSA-2026:3836

https://access.redhat.com/errata/RHSA-2026:3835

https://access.redhat.com/errata/RHSA-2026:3833

https://access.redhat.com/errata/RHSA-2026:3831

https://access.redhat.com/errata/RHSA-2026:3822

https://access.redhat.com/errata/RHSA-2026:3821

https://access.redhat.com/errata/RHSA-2026:3820

https://access.redhat.com/errata/RHSA-2026:3818

https://access.redhat.com/errata/RHSA-2026:3817

https://access.redhat.com/errata/RHSA-2026:3816

https://access.redhat.com/errata/RHSA-2026:3815

https://access.redhat.com/errata/RHSA-2026:3814

https://access.redhat.com/errata/RHSA-2026:3813

https://access.redhat.com/errata/RHSA-2026:3812

https://access.redhat.com/errata/RHSA-2026:3782

https://access.redhat.com/errata/RHSA-2026:3753

https://access.redhat.com/errata/RHSA-2026:3752

https://access.redhat.com/errata/RHSA-2026:3713

https://access.redhat.com/errata/RHSA-2026:3699

https://access.redhat.com/errata/RHSA-2026:3669

https://access.redhat.com/errata/RHSA-2026:3668

https://access.redhat.com/errata/RHSA-2026:3559

https://access.redhat.com/errata/RHSA-2026:3556

https://access.redhat.com/errata/RHSA-2026:3506

https://access.redhat.com/errata/RHSA-2026:3489

https://access.redhat.com/errata/RHSA-2026:3473

https://access.redhat.com/errata/RHSA-2026:3472

https://access.redhat.com/errata/RHSA-2026:3471

https://access.redhat.com/errata/RHSA-2026:3470

https://access.redhat.com/errata/RHSA-2026:3469

https://access.redhat.com/errata/RHSA-2026:3468

https://access.redhat.com/errata/RHSA-2026:3459

https://access.redhat.com/errata/RHSA-2026:3427

https://access.redhat.com/errata/RHSA-2026:3416

https://access.redhat.com/errata/RHSA-2026:3391

https://access.redhat.com/errata/RHSA-2026:3343

https://access.redhat.com/errata/RHSA-2026:3341

https://access.redhat.com/errata/RHSA-2026:3340

https://access.redhat.com/errata/RHSA-2026:3337

https://access.redhat.com/errata/RHSA-2026:3336

https://access.redhat.com/errata/RHSA-2026:3298

https://access.redhat.com/errata/RHSA-2026:3297

https://access.redhat.com/errata/RHSA-2026:3296

https://access.redhat.com/errata/RHSA-2026:3291

https://access.redhat.com/errata/RHSA-2026:3193

https://access.redhat.com/errata/RHSA-2026:3192

https://access.redhat.com/errata/RHSA-2026:3188

https://access.redhat.com/errata/RHSA-2026:3187

https://access.redhat.com/errata/RHSA-2026:3186

https://access.redhat.com/errata/RHSA-2026:3184

https://access.redhat.com/errata/RHSA-2026:3092

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS