https://seclists.org/oss-sec/2025/q1/190: Go CVE-2025-22870: proxy bypass using IPv6 zone IDs
Published Mar 7, 2025
·Updated
Affected Software
1 affected component
Google Go>=1.23.7<=1.24.1
Frequently Asked Questions
1
What is the severity of CVE-2025-22870?
CVE-2025-22870 has been classified as a critical severity vulnerability due to its potential to bypass security measures.
2
What systems are affected by CVE-2025-22870?
CVE-2025-22870 affects Google Go versions prior to 1.24.1 and 1.23.7.
3
How do I fix CVE-2025-22870?
To fix CVE-2025-22870, update your Google Go to version 1.24.1 or 1.23.7 or later.
4
What does CVE-2025-22870 exploit?
CVE-2025-22870 exploits a proxy bypass vulnerability using IPv6 zone IDs.
5
Is there a workaround for CVE-2025-22870?
As of now, there are no known workarounds for CVE-2025-22870, so immediate updates are recommended.