—

GO-2026-4601

Incorrect parsing of IPv6 host literals in net/url

Quick fix

GO-2026-4601 — stdlib: upgrade to the fixed version with the command below.

go get stdlib@v1.25.8

Details

url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.

Enter the version of the package you're using.

Introduced in: 0 Fixed in: 1.25.8

Fix go get stdlib@v1.25.8