CLEANSTART-2026-ZG03604 net/url package does not set a limit on the number of query parameters in a query

🗓️ 09 Apr 2026 00:59:37Reported by GoogleType

osv

osv🔗 osv.dev👁 6 Views

The network address package does not limit query parameters, impacting tempo package security.

Reporter	Title	Published	Views	Family All 5619
OSV	CLEANSTART-2026-YC48827 Within HostnameError	30 Jan 202615:56	–	osv
OSV	CLEANSTART-2026-YD35232 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...	30 Apr 202600:38	–	osv
OSV	CLEANSTART-2026-YD87381 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate	30 Jan 202616:22	–	osv
OSV	CLEANSTART-2026-YE95783 Security fixes in tigera-operator 1.40.2-r0	30 Jul 202607:10	–	osv
OSV	CLEANSTART-2026-YF71424 Security fixes in prometheus-redis-exporter 1.80.1-r0	30 Jul 202607:10	–	osv
OSV	CLEANSTART-2026-YF74364 OpenTelemetry-Go is the Go implementation of OpenTelemetry	15 Apr 202600:54	–	osv
OSV	CLEANSTART-2026-YG10806 Security fixes in druid-exporter-fips 0.10-r2	30 Jul 202607:10	–	osv
OSV	CLEANSTART-2026-YG64479 Security fixes for CVE-2025-61729 applied in versions: 0.20.2-r1	1 Apr 202610:03	–	osv
OSV	CLEANSTART-2026-YG73853 Security fixes for CVE-2025-0913, CVE-2025-4673, CVE-2025-47907, CVE-2025-47911, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 2.5.1-r0, 2.5.1-r1, 2.5.1-r2	1 Apr 202609:10	–	osv
OSV	CLEANSTART-2026-YG94604 Within HostnameError	30 Jan 202617:24	–	osv

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-ZG03604.json
osv	www.osv.dev/vulnerability/CVE-2025-61726
osv	www.osv.dev/vulnerability/CVE-2025-61727
osv	www.osv.dev/vulnerability/CVE-2025-61728
osv	www.osv.dev/vulnerability/CVE-2025-61729
osv	www.osv.dev/vulnerability/CVE-2025-61730
osv	www.osv.dev/vulnerability/CVE-2025-68119
osv	www.osv.dev/vulnerability/ghsa-cfpf-hrx2-8rv6
osv	www.osv.dev/vulnerability/ghsa-f6x5-jh6r-wrfv
osv	www.osv.dev/vulnerability/ghsa-j5w8-q4qc-rx2x

09 Jul 2026 00:45Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.19.8

EPSS0.01945

network address package query parameter limit tempo package vulnerabilities