Skip to content
Sign in
7.5 High

CVE-2026-25679 url.Parse insufficiently validated the host/authority component and accepted some invalid URLs

Description

url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.

Affected products and versions

Product Affected versions Fixed in
Red Hat Ansible Automation Platform 2.6 for RHEL 10 Versions not published
Red Hat Enterprise Linux Server (v. 7 ELS) Versions not published
Red Hat Ansible Automation Platform 2.5 for RHEL 8 Versions not published
Red Hat OpenShift Container Platform 4.12 1777001645 earliest → < 1777001645 1777001645
Red Hat OpenShift Container Platform 4.13 1779889628 earliest → < 1779889628 1779889628
Red Hat OpenShift Container Platform 4.16 1779254541 earliest → < 1779254541 1779254541
Red Hat OpenShift Container Platform 4.18 1779787600 earliest → < 1779787600 1779787600
Red Hat Satellite 6.16 for RHEL 8 Versions not published
Red Hat Ansible Automation Platform 2.5 for RHEL 9 Versions not published
Show the 209 other branches
Product Affected versions Fixed in
Red Hat Ansible Automation Platform 2.6 for RHEL 9 Versions not published
Cryostat 4 on RHEL 9 4.1 earliest → < 4.1.1-6 4.1.1-6
Red Hat OpenStack Platform 17.1 Versions not published
Red Hat Satellite 6.16 for RHEL 9 Versions not published
Red Hat Enterprise Linux AppStream EUS (v. 10.0) Versions not published
Red Hat Enterprise Linux AppStream (v. 10) Versions not published
Red Hat Enterprise Linux AppStream (v. 8) Versions not published
Red Hat Enterprise Linux AppStream AUS (v. 8.2) Versions not published
Red Hat Enterprise Linux AppStream AUS (v.8.4) Versions not published
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) Versions not published
Red Hat Enterprise Linux AppStream AUS (v.8.6) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.8.6) Versions not published
Red Hat Enterprise Linux AppStream TUS (v.8.6) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.8.8) Versions not published
Red Hat Enterprise Linux AppStream TUS (v.8.8) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.9.0) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.9.2) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.9.4) Versions not published
Red Hat Enterprise Linux AppStream EUS (v.9.4) Versions not published
Red Hat Enterprise Linux AppStream EUS (v.9.6) Versions not published
Red Hat Enterprise Linux AppStream (v. 9) Versions not published
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) Versions not published
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) Versions not published
Red Hat CodeReady Linux Builder EUS (v.9.4) Versions not published
Red Hat CodeReady Linux Builder EUS (v.9.6) Versions not published
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) Versions not published
Custom Metric Autoscaler 2.19 1780101239 earliest → < 1780101239 1780101239
DevWorkspace Operator 0.4 1776457293 earliest → < 1776457293 1776457293
Logging Subsystem for Red Hat OpenShift 6.0 1781192891 earliest → < 1781192891 1781192891
Logging Subsystem for Red Hat OpenShift 6.2 1776800087 earliest → < 1776800087 1776800087
Logging Subsystem for Red Hat OpenShift 6.4 1780051640 earliest → < 1780051640 1780051640
Multicluster Global Hub 1.3.4 1779210675 earliest → < 1779210675 1779210675
Multicluster Global Hub 1.4.5 1779838819 earliest → < 1779838819 1779838819
Multicluster Global Hub 1.5.4 1779828691 earliest → < 1779828691 1779828691
Multicluster Global Hub 1.5.4 1773650627 earliest → < 1773650627 1773650627
Multicluster Global Hub 1.6.2 1780320809 earliest → < 1780320809 1780320809
Network Observability (NETOBSERV) 1.11.2 Versions not published
OpenShift API for Data Protection 1.4 1779809598 earliest → < 1779809598 1779809598
OpenShift API for Data Protection 1.5 1779808027 earliest → < 1779808027 1779808027
OpenShift Compliance Operator 1 1776237332 earliest → < 1776237332 1776237332
OpenShift File Integrity Operator - FIO 1 1780389566 earliest → < 1780389566 1780389566
Red Hat Advanced Cluster Management for Kubernetes 2.14 1780238563 earliest → < 1780238563 1780238563
Red Hat Advanced Cluster Management for Kubernetes 2.15 1774085848 earliest → < 1774085848 1774085848
Red Hat Advanced Cluster Security for Kubernetes 4.10 1778755463 earliest → < 1778755463 1778755463
Red Hat Advanced Cluster Security for Kubernetes 4.8 1777307791 earliest → < 1777307791 1777307791
Red Hat Advanced Cluster Security for Kubernetes 4.9 1782891812 earliest → < 1782891812 1782891812
Red Hat Ansible Automation Platform 2.6 1777391542 earliest → < 1777391542 1777391542
Red Hat Developer Hub 1.8 1776783947 earliest → < 1776783947 1776783947
Red Hat Developer Hub 1.9 1775140369 earliest → < 1775140369 1775140369
Red Hat Enterprise Linux AI 3.3 1776938871 earliest → < 1776938871 1776938871
Red Hat Hardened Images 1.25 earliest → < 1.25.9-1.hum1 1.25.9-1.hum1
Red Hat Lightspeed (formerly Insights) for Runtimes 1 1.0 earliest → < 1.0.2-1776288486 1.0.2-1776288486
Red Hat OpenShift AI 2.25 1776773362 earliest → < 1776773362 1776773362
Red Hat OpenShift Builds 1.6.5 1774334066 earliest → < 1774334066 1774334066
Red Hat OpenShift Builds 1.7.3 1776846936 earliest → < 1776846936 1776846936
Red Hat OpenShift Container Platform 4.14 1777997544 earliest → < 1777997544 1777997544
Red Hat OpenShift Container Platform 4.15 1777478134 earliest → < 1777478134 1777478134
Red Hat OpenShift Container Platform 4.17 1778710215 earliest → < 1778710215 1778710215
Red Hat OpenShift Container Platform 4.19 1779251232 earliest → < 1779251232 1779251232
Red Hat OpenShift Container Platform 4.20 1774635068 earliest → < 1774635068 1774635068
Red Hat OpenShift Dev Spaces 3.27 1776789889 earliest → < 1776789889 1776789889
Red Hat OpenShift Service Mesh 2.6 1777375171 earliest → < 1777375171 1777375171
Red Hat OpenShift Service Mesh 3.0 1776180733 earliest → < 1776180733 1776180733
Red Hat OpenShift Service Mesh 3.1 1776232570 earliest → < 1776232570 1776232570
Red Hat OpenShift Service Mesh 3.2 1776232405 earliest → < 1776232405 1776232405
Red Hat OpenShift Service Mesh 3.3 1776419718 earliest → < 1776419718 1776419718
Red Hat OpenShift distributed tracing 3.9.3 1776435680 earliest → < 1776435680 1776435680
Red Hat OpenStack 1.5 1777452570 earliest → < 1777452570 1777452570
Red Hat OpenStack Services on OpenShift 18 1774974026 earliest → < 1774974026 1774974026
Red Hat Quay 3.12 1776752646 earliest → < 1776752646 1776752646
Red Hat Quay 3.12 1775253092 earliest → < 1775253092 1775253092
Red Hat Quay 3.14 1779689392 earliest → < 1779689392 1779689392
Red Hat Quay 3.15 1780891395 earliest → < 1780891395 1780891395
Red Hat Quay 3.16 1779204086 earliest → < 1779204086 1779204086
Red Hat Quay 3.1 1776736910 earliest → < 1776736910 1776736910
Red Hat Quay 3.9 1776782369 earliest → < 1776782369 1776782369
Red Hat Satellite 6.18 1778082595 earliest → < 1778082595 1778082595
Red Hat Trusted Artifact Signer 1.3 1776339099 earliest → < 1776339099 1776339099
Red Hat Update Infrastructure 5 1777459504 earliest → < 1777459504 1777459504
Red Hat Web Terminal 1.11 1776966691 earliest → < 1776966691 1776966691
Red Hat Web Terminal 1.12 1776959849 earliest → < 1776959849 1776959849
Red Hat Web Terminal 1.13 1776197785 earliest → < 1776197785 1776197785
Red Hat Web Terminal 1.14 1776199398 earliest → < 1776199398 1776199398
Red Hat Web Terminal 1.15 1775672762 earliest → < 1775672762 1775672762
mirror registry for Red Hat OpenShift 2.0 1782177012 earliest → < 1782177012 1782177012
Assisted Installer for Red Hat OpenShift Container Platform 2 Versions not published
cert-manager Operator for Red Hat OpenShift Versions not published
Confidential Compute Attestation Versions not published
Deployment Validation Operator Versions not published
External Secrets Operator for Red Hat OpenShift Versions not published
ExternalDNS Operator Versions not published
Fence Agents Remediation Operator Versions not published
Gatekeeper 3 Versions not published
Logging Subsystem for Red Hat OpenShift Versions not published
Logical Volume Manager Storage Versions not published
Machine Deletion Remediation Operator Versions not published
Migration Toolkit for Applications 8 Versions not published
Migration Toolkit for Containers Versions not published
mirror registry for Red Hat OpenShift Versions not published
Multicluster Engine for Kubernetes Versions not published
OpenShift Developer Tools and Services Versions not published
OpenShift Lightspeed Versions not published
OpenShift Pipelines Versions not published
OpenShift Serverless Versions not published
OpenShift Service Mesh 2 Versions not published
Red Hat 3scale API Management Platform 2 Versions not published
Red Hat Certification Program for Red Hat Enterprise Linux 9 Versions not published
Red Hat Connectivity Link 1 Versions not published
Red Hat Edge Manager 1 Versions not published
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 7 Versions not published
Red Hat Enterprise Linux 8 Versions not published
Red Hat Enterprise Linux 9 Versions not published
Red Hat OpenShift Cluster Manager CLI Versions not published
Red Hat OpenShift Container Platform 4 Versions not published
Red Hat Openshift Data Foundation 4 Versions not published
Red Hat OpenShift GitOps Versions not published
Red Hat OpenShift on AWS Versions not published
Red Hat OpenShift Virtualization 4 Versions not published
Red Hat OpenStack Platform 16.2 Versions not published
Red Hat OpenStack Platform 18.0 Versions not published
Red Hat Quay 3 Versions not published
Red Hat Satellite 6 Versions not published
Red Hat Service Interconnect 1 Versions not published
Red Hat Service Interconnect 2 Versions not published
Security Profiles Operator Versions not published
streams for Apache Kafka 3 Versions not published
Zero Trust Workload Identity Manager Versions not published
Zero Trust Workload Identity Manager - Tech Preview Versions not published
Node HealthCheck Operator Versions not published
Power monitoring for Red Hat OpenShift Versions not published
Red Hat AMQ Clients Versions not published
Red Hat Ansible Automation Platform 2 Versions not published
Red Hat build of Apache Camel - HawtIO 4 Versions not published
Red Hat OpenShift AI (RHOAI) Versions not published
Red Hat OpenShift for Windows Containers Versions not published
net/url 1.26 1.26.0-0 → < 1.26.1 1.26.1
net/url 1.25 earliest → < 1.25.8 1.25.8
Red Hat Quay 3.10 1776736910 earliest → < 1776736910 1776736910
Red Hat Satellite 6.19 for RHEL 9 Versions not published
Red Hat OpenShift Builds 1.7.4 1776846936 earliest → < 1776846936 1776846936
RHEM 1.0 for RHEL 9 Versions not published
Red Hat Edge Manager 1.0 1783502438 earliest → < 1783502438 1783502438
Red Hat OpenShift Service Mesh 3 1776180733 earliest → < 1776180733 1776180733
Red Hat Enterprise Linux 10.0 Extended Update Support Versions not published
Red Hat Enterprise Linux 7 Extended Lifecycle Support Versions not published
Red Hat Enterprise Linux 8.2 Advanced Update Support Versions not published
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Versions not published
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Versions not published
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Versions not published
Red Hat Enterprise Linux 8.6 Telecommunications Update Service Versions not published
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 8.8 Telecommunications Update Service Versions not published
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9.4 Extended Update Support Versions not published
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9.6 Extended Update Support Versions not published
Red Hat OpenStack Platform 17.1 for RHEL 9 Versions not published
OpenShift Service Mesh 3 Versions not published
Red Hat OpenStack Services on OpenShift 18.0 1774974026 earliest → < 1774974026 1774974026
Red Hat Edge Manager 1.1 1784127736 earliest → < 1784127736 1784127736
RHEM 1.1 for RHEL 10 Versions not published
RHEM 1.1 for RHEL 9 Versions not published
Builds for Red Hat OpenShift 1.6.0 1774334066 earliest → < 1774334066 1774334066
Compliance Operator 1 1776237332 earliest → < 1776237332 1776237332
Red Hat Advanced Cluster Security 4.8 1777307791 earliest → < 1777307791 1777307791
Red Hat Advanced Cluster Security 4.9 1782891812 earliest → < 1782891812 1782891812
Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 1.0 earliest → < 1.0.2-1776288486 1.0.2-1776288486
Red Hat multicluster global hub 1.4.3 1779838819 earliest → < 1779838819 1779838819
Red Hat OpenShift Builds 1.7.1 1776846936 earliest → < 1776846936 1776846936
Red Hat OpenShift Container Platform 4.2 1774635068 earliest → < 1774635068 1774635068
Service Telemetry Framework 1.5 1777452570 earliest → < 1777452570 1777452570
Red Hat Satellite 6.17 for RHEL 9 Versions not published
Red Hat Satellite 6.18 for RHEL 9 Versions not published
Logging for Red Hat OpenShift 6.0 1781192891 earliest → < 1781192891 1781192891
Logging for Red Hat OpenShift 6.2 1776800087 earliest → < 1776800087 1776800087
Red Hat Migration Toolkit 1.8 1783914276 earliest → < 1783914276 1783914276
Red Hat multicluster global hub 1.5.2 1779828691 earliest → < 1779828691 1779828691
Red Hat multicluster global hub 1.5.2 1773650627 earliest → < 1773650627 1773650627
Red Hat OpenShift distributed tracing 3.9.1 1776435680 earliest → < 1776435680 1776435680
Multicluster Global Hub 1.5.6 1779828691 earliest → < 1779828691 1779828691
Multicluster Global Hub 1.5.6 1773650627 earliest → < 1773650627 1773650627
Multicluster Global Hub 1.6.4 1780320809 earliest → < 1780320809 1780320809
Logging for Red Hat OpenShift 6.4 1780051640 earliest → < 1780051640 1780051640
Logging Subsystem for Red Hat OpenShift 6 1781192891 earliest → < 1781192891 1781192891
Network Observability (NETOBSERV) 1.11.1 1778508501 earliest → < 1778508501 1778508501
Red Hat multicluster global hub 1.5.0 1779828691 earliest → < 1779828691 1779828691
Red Hat multicluster global hub 1.5.0 1773650627 earliest → < 1773650627 1773650627
File Integrity Operator 1 1780389566 earliest → < 1780389566 1780389566
Red Hat multicluster global hub 1.4.4 1779838819 earliest → < 1779838819 1779838819
Red Hat multicluster global hub 1.6.0 1780320809 earliest → < 1780320809 1780320809
Red Hat OpenShift distributed tracing 3.9.2 1776435680 earliest → < 1776435680 1776435680
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On Versions not published
Multicluster Global Hub 1.5.7 Versions not published
Multicluster Global Hub 1.6.5 1780320809 earliest → < 1780320809 1780320809
9Base-RHOSO-TOOLS-18 Versions not published
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) Versions not published
Builds for Red Hat OpenShift 1.6.1 1774334066 earliest → < 1774334066 1774334066
Network Observability (NETOBSERV) 1.11.0 1778508501 earliest → < 1778508501 1778508501
Red Hat multicluster global hub 1.4.2 1779838819 earliest → < 1779838819 1779838819
Red Hat multicluster global hub 1.5.1 1779828691 earliest → < 1779828691 1779828691
Red Hat multicluster global hub 1.5.1 1773650627 earliest → < 1773650627 1773650627
Red Hat Migration Toolkit for Containers 1.8 1783914276 earliest → < 1783914276 1783914276
Red Hat OpenShift Builds 1.6.4 1774334066 earliest → < 1774334066 1774334066
Red Hat multicluster global hub 1.5.3 1779828691 earliest → < 1779828691 1779828691
Red Hat multicluster global hub 1.5.3 1773650627 earliest → < 1773650627 1773650627
Logging for Red Hat OpenShift 6 1781192891 earliest → < 1781192891 1781192891

Other CVEs of Red Hat Ansible Automation Platform 2.6 for RHEL 10

The 36 CVEs of Red Hat Ansible Automation Platform 2.6 for RHEL 10 →
CVE-2026-11332 Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution 7.8 High CVE-2026-27145 (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name… 6.5 Medium CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label 9.6 Critical CVE-2026-33811 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a… 7.5 High
Track this CVE