Detections
Analytics
Golang: stdlib: security update to 1.24.8stdlib: security update to 1.25.2
medium Tenable Cloud Security Plugin ID 435866
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- The Parse function permits values other than IPv6 addresses to be included in square brackets within the
host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component,
enclosed within square brackets. For example: "http://[::1]/". IPv4 addresses and hostnames must not
appear within square brackets. Parse did not enforce this requirement. (CVE-2025-47912)
See Also
Plugin Details
Severity: Medium
ID: 435866
Version: Revision 1.12
Type: Local
Family: Golang
Published: 10/30/2025
Updated: 5/4/2026
Risk Information
VPR
Risk Factor: Low
Score: 1.4
CVSS v2
Risk Factor: High
Base Score: 8.5
Temporal Score: 6.3
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:C
CVSS Score Source: CVE-2025-47912
CVSS v3
Risk Factor: Medium
Base Score: 5.3
Temporal Score: 4.6
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 10/29/2025
Vulnerability Publication Date: 10/23/2025
Reference Information
CVE: CVE-2025-47912