SUSE CVE-2026-39825

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

CVE-2026-39825

The Go programming language 's built-in ReverseProxy component is vulnerable to a logic error where it fails to account for the url.ParseQuery limit on the total number of query parameters (controlled by GODEBUG=urlmaxqueryparams=N). This allows ReverseProxy to forward a request containing query ...