CERT24RHSA-2026:22733 — Red Hat Security Advisory: osbuild-composer security updateLoading data…
CERT24Threat Observatory
Period

RHSA-2026:22733 — Red Hat Security Advisory: osbuild-composer security update

The Red Hat security advisory describes a security update for osbuild-composer. The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP literal as ignorable.

← Back to intelligence

RHSA-2026:22733 — Red Hat Security Advisory: osbuild-composer security update

The Red Hat security advisory describes a security update for osbuild-composer. The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP literal as ignorable.