HIGH7.5
The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encoded forms. Parsing a large form containing many unique query parameters can cause excessive memory consumption.
CVSS 3.xHIGH 7.5
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HReferences
- https://go.dev/cl/736712
- https://go.dev/issue/77101
- https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc
- https://pkg.go.dev/vuln/GO-2026-4341
- https://access.redhat.com/errata/RHSA-2026:10096
- https://access.redhat.com/errata/RHSA-2026:10104
- https://access.redhat.com/errata/RHSA-2026:10184
- https://access.redhat.com/errata/RHSA-2026:10225
- https://access.redhat.com/errata/RHSA-2026:10250
- https://access.redhat.com/errata/RHSA-2026:11408
- https://access.redhat.com/errata/RHSA-2026:11414
- https://access.redhat.com/errata/RHSA-2026:11747
- https://access.redhat.com/errata/RHSA-2026:11749
- https://access.redhat.com/errata/RHSA-2026:12028
- https://access.redhat.com/errata/RHSA-2026:12029
- https://access.redhat.com/errata/RHSA-2026:12030
- https://access.redhat.com/errata/RHSA-2026:12031
- https://access.redhat.com/errata/RHSA-2026:12032
- https://access.redhat.com/errata/RHSA-2026:12033
- https://access.redhat.com/errata/RHSA-2026:12279
- https://access.redhat.com/errata/RHSA-2026:12282
- https://access.redhat.com/errata/RHSA-2026:13542
- https://access.redhat.com/errata/RHSA-2026:13548
- https://access.redhat.com/errata/RHSA-2026:13571
- https://access.redhat.com/errata/RHSA-2026:14100
- https://access.redhat.com/errata/RHSA-2026:14774
- https://access.redhat.com/errata/RHSA-2026:14868
- https://access.redhat.com/errata/RHSA-2026:14879
- https://access.redhat.com/errata/RHSA-2026:15091
- https://access.redhat.com/errata/RHSA-2026:15984
- https://access.redhat.com/errata/RHSA-2026:16102
- https://access.redhat.com/errata/RHSA-2026:16696
- https://access.redhat.com/errata/RHSA-2026:17040
- https://access.redhat.com/errata/RHSA-2026:17084
- https://access.redhat.com/errata/RHSA-2026:17446
- https://access.redhat.com/errata/RHSA-2026:17460
- https://access.redhat.com/errata/RHSA-2026:17463
- https://access.redhat.com/errata/RHSA-2026:17468
- https://access.redhat.com/errata/RHSA-2026:17595
- https://access.redhat.com/errata/RHSA-2026:17598
- https://access.redhat.com/errata/RHSA-2026:18913
- https://access.redhat.com/errata/RHSA-2026:19013
- https://access.redhat.com/errata/RHSA-2026:19132
- https://access.redhat.com/errata/RHSA-2026:19375
- https://access.redhat.com/errata/RHSA-2026:19634
- https://access.redhat.com/errata/RHSA-2026:19712
- https://access.redhat.com/errata/RHSA-2026:20041
- https://access.redhat.com/errata/RHSA-2026:21017
- https://access.redhat.com/errata/RHSA-2026:21657
- https://access.redhat.com/errata/RHSA-2026:21691
- https://access.redhat.com/errata/RHSA-2026:22450
- https://access.redhat.com/errata/RHSA-2026:22627
- https://access.redhat.com/errata/RHSA-2026:22714
- https://access.redhat.com/errata/RHSA-2026:22937
- https://access.redhat.com/errata/RHSA-2026:23228
- https://access.redhat.com/errata/RHSA-2026:23361
- https://access.redhat.com/errata/RHSA-2026:24977
- https://access.redhat.com/errata/RHSA-2026:25089
- https://access.redhat.com/errata/RHSA-2026:25127
- https://access.redhat.com/errata/RHSA-2026:25248
- https://access.redhat.com/errata/RHSA-2026:25250
- https://access.redhat.com/errata/RHSA-2026:25251
- https://access.redhat.com/errata/RHSA-2026:25252
- https://access.redhat.com/errata/RHSA-2026:25253
- https://access.redhat.com/errata/RHSA-2026:26420
- https://access.redhat.com/errata/RHSA-2026:26527
- https://access.redhat.com/errata/RHSA-2026:26541
- https://access.redhat.com/errata/RHSA-2026:26636
- https://access.redhat.com/errata/RHSA-2026:2681
- https://access.redhat.com/errata/RHSA-2026:2706
- https://access.redhat.com/errata/RHSA-2026:2708
- https://access.redhat.com/errata/RHSA-2026:2709
- https://access.redhat.com/errata/RHSA-2026:2754
- https://access.redhat.com/errata/RHSA-2026:28047
- https://access.redhat.com/errata/RHSA-2026:2844
- https://access.redhat.com/errata/RHSA-2026:28441
- https://access.redhat.com/errata/RHSA-2026:2914
- https://access.redhat.com/errata/RHSA-2026:2920
- https://access.redhat.com/errata/RHSA-2026:3035
- https://access.redhat.com/errata/RHSA-2026:3040
- https://access.redhat.com/errata/RHSA-2026:3089
- https://access.redhat.com/errata/RHSA-2026:3092
- https://access.redhat.com/errata/RHSA-2026:3184
- https://access.redhat.com/errata/RHSA-2026:3186
- https://access.redhat.com/errata/RHSA-2026:3187
- https://access.redhat.com/errata/RHSA-2026:3188
- https://access.redhat.com/errata/RHSA-2026:3192
- https://access.redhat.com/errata/RHSA-2026:3193
- https://access.redhat.com/errata/RHSA-2026:3291
- https://access.redhat.com/errata/RHSA-2026:3296
- https://access.redhat.com/errata/RHSA-2026:3297
- https://access.redhat.com/errata/RHSA-2026:3298
- https://access.redhat.com/errata/RHSA-2026:3336
- https://access.redhat.com/errata/RHSA-2026:3337
- https://access.redhat.com/errata/RHSA-2026:3340
- https://access.redhat.com/errata/RHSA-2026:3341
- https://access.redhat.com/errata/RHSA-2026:3343
- https://access.redhat.com/errata/RHSA-2026:3391
- https://access.redhat.com/errata/RHSA-2026:3416
- https://access.redhat.com/errata/RHSA-2026:3427
- https://access.redhat.com/errata/RHSA-2026:3459
- https://access.redhat.com/errata/RHSA-2026:3468
- https://access.redhat.com/errata/RHSA-2026:3469
- https://access.redhat.com/errata/RHSA-2026:3470
- https://access.redhat.com/errata/RHSA-2026:3471
- https://access.redhat.com/errata/RHSA-2026:3472
- https://access.redhat.com/errata/RHSA-2026:3473
- https://access.redhat.com/errata/RHSA-2026:3489
- https://access.redhat.com/errata/RHSA-2026:3506
- https://access.redhat.com/errata/RHSA-2026:3556
- https://access.redhat.com/errata/RHSA-2026:3559
- https://access.redhat.com/errata/RHSA-2026:3668
- https://access.redhat.com/errata/RHSA-2026:3669
- https://access.redhat.com/errata/RHSA-2026:3699
- https://access.redhat.com/errata/RHSA-2026:3713
- https://access.redhat.com/errata/RHSA-2026:3752
- https://access.redhat.com/errata/RHSA-2026:3753
- https://access.redhat.com/errata/RHSA-2026:3782
- https://access.redhat.com/errata/RHSA-2026:3812
- https://access.redhat.com/errata/RHSA-2026:3813
- https://access.redhat.com/errata/RHSA-2026:3814
- https://access.redhat.com/errata/RHSA-2026:3815
- https://access.redhat.com/errata/RHSA-2026:3816
- https://access.redhat.com/errata/RHSA-2026:3817
- https://access.redhat.com/errata/RHSA-2026:3818
- https://access.redhat.com/errata/RHSA-2026:3820
- https://access.redhat.com/errata/RHSA-2026:3821
- https://access.redhat.com/errata/RHSA-2026:3822
- https://access.redhat.com/errata/RHSA-2026:3831
- https://access.redhat.com/errata/RHSA-2026:3833
- https://access.redhat.com/errata/RHSA-2026:3835
- https://access.redhat.com/errata/RHSA-2026:3836
- https://access.redhat.com/errata/RHSA-2026:3838
- https://access.redhat.com/errata/RHSA-2026:3839
- https://access.redhat.com/errata/RHSA-2026:3840
- https://access.redhat.com/errata/RHSA-2026:3841
- https://access.redhat.com/errata/RHSA-2026:3843
- https://access.redhat.com/errata/RHSA-2026:3854
- https://access.redhat.com/errata/RHSA-2026:3855
- https://access.redhat.com/errata/RHSA-2026:3856
- https://access.redhat.com/errata/RHSA-2026:3864
- https://access.redhat.com/errata/RHSA-2026:3869
- https://access.redhat.com/errata/RHSA-2026:3874
- https://access.redhat.com/errata/RHSA-2026:3875
- https://access.redhat.com/errata/RHSA-2026:3879
- https://access.redhat.com/errata/RHSA-2026:3880
- https://access.redhat.com/errata/RHSA-2026:3884
- https://access.redhat.com/errata/RHSA-2026:3898
- https://access.redhat.com/errata/RHSA-2026:3905
- https://access.redhat.com/errata/RHSA-2026:3906
- https://access.redhat.com/errata/RHSA-2026:3928
- https://access.redhat.com/errata/RHSA-2026:3929
- https://access.redhat.com/errata/RHSA-2026:3930
- https://access.redhat.com/errata/RHSA-2026:3931
- https://access.redhat.com/errata/RHSA-2026:3932
- https://access.redhat.com/errata/RHSA-2026:3958
- https://access.redhat.com/errata/RHSA-2026:3959
- https://access.redhat.com/errata/RHSA-2026:3960
- https://access.redhat.com/errata/RHSA-2026:3970
- https://access.redhat.com/errata/RHSA-2026:3971
- https://access.redhat.com/errata/RHSA-2026:3972
- https://access.redhat.com/errata/RHSA-2026:3973
- https://access.redhat.com/errata/RHSA-2026:3974
- https://access.redhat.com/errata/RHSA-2026:3977
- https://access.redhat.com/errata/RHSA-2026:3985
- https://access.redhat.com/errata/RHSA-2026:4164
- https://access.redhat.com/errata/RHSA-2026:4166
- https://access.redhat.com/errata/RHSA-2026:4170
- https://access.redhat.com/errata/RHSA-2026:4174
- https://access.redhat.com/errata/RHSA-2026:4177
- https://access.redhat.com/errata/RHSA-2026:4211
- https://access.redhat.com/errata/RHSA-2026:4220
- https://access.redhat.com/errata/RHSA-2026:4256
- https://access.redhat.com/errata/RHSA-2026:4264
- https://access.redhat.com/errata/RHSA-2026:4267
- https://access.redhat.com/errata/RHSA-2026:4270
- https://access.redhat.com/errata/RHSA-2026:4276
- https://access.redhat.com/errata/RHSA-2026:4434
- https://access.redhat.com/errata/RHSA-2026:4435
- https://access.redhat.com/errata/RHSA-2026:4460
- https://access.redhat.com/errata/RHSA-2026:4466
- https://access.redhat.com/errata/RHSA-2026:4467
- https://access.redhat.com/errata/RHSA-2026:4498
- https://access.redhat.com/errata/RHSA-2026:4500
- https://access.redhat.com/errata/RHSA-2026:4510
- https://access.redhat.com/errata/RHSA-2026:4511
- https://access.redhat.com/errata/RHSA-2026:4672
- https://access.redhat.com/errata/RHSA-2026:4753
- https://access.redhat.com/errata/RHSA-2026:4892
- https://access.redhat.com/errata/RHSA-2026:4901
- https://access.redhat.com/errata/RHSA-2026:4907
- https://access.redhat.com/errata/RHSA-2026:4939
- https://access.redhat.com/errata/RHSA-2026:4942
- https://access.redhat.com/errata/RHSA-2026:4943
- https://access.redhat.com/errata/RHSA-2026:4952
- https://access.redhat.com/errata/RHSA-2026:5022
- https://access.redhat.com/errata/RHSA-2026:5030
- https://access.redhat.com/errata/RHSA-2026:5031
- https://access.redhat.com/errata/RHSA-2026:5076
- https://access.redhat.com/errata/RHSA-2026:5077
- https://access.redhat.com/errata/RHSA-2026:5078
- https://access.redhat.com/errata/RHSA-2026:5079
- https://access.redhat.com/errata/RHSA-2026:5110
- https://access.redhat.com/errata/RHSA-2026:5129
- https://access.redhat.com/errata/RHSA-2026:5130
- https://access.redhat.com/errata/RHSA-2026:5131
- https://access.redhat.com/errata/RHSA-2026:5132
- https://access.redhat.com/errata/RHSA-2026:5145
- https://access.redhat.com/errata/RHSA-2026:5146
- https://access.redhat.com/errata/RHSA-2026:5168
- https://access.redhat.com/errata/RHSA-2026:5327
- https://access.redhat.com/errata/RHSA-2026:5394
- https://access.redhat.com/errata/RHSA-2026:5439
- https://access.redhat.com/errata/RHSA-2026:5444
- https://access.redhat.com/errata/RHSA-2026:5447
- https://access.redhat.com/errata/RHSA-2026:5452
- https://access.redhat.com/errata/RHSA-2026:5461
- https://access.redhat.com/errata/RHSA-2026:5463
- https://access.redhat.com/errata/RHSA-2026:5533
- https://access.redhat.com/errata/RHSA-2026:5544
- https://access.redhat.com/errata/RHSA-2026:5549
- https://access.redhat.com/errata/RHSA-2026:5636
- https://access.redhat.com/errata/RHSA-2026:5645
- https://access.redhat.com/errata/RHSA-2026:5649
- https://access.redhat.com/errata/RHSA-2026:5665
- https://access.redhat.com/errata/RHSA-2026:5807
- https://access.redhat.com/errata/RHSA-2026:5851
- https://access.redhat.com/errata/RHSA-2026:5852
- https://access.redhat.com/errata/RHSA-2026:5853
- https://access.redhat.com/errata/RHSA-2026:5948
- https://access.redhat.com/errata/RHSA-2026:5950
- https://access.redhat.com/errata/RHSA-2026:5952
- https://access.redhat.com/errata/RHSA-2026:5968
- https://access.redhat.com/errata/RHSA-2026:6184
- https://access.redhat.com/errata/RHSA-2026:6192
- https://access.redhat.com/errata/RHSA-2026:6226
- https://access.redhat.com/errata/RHSA-2026:6251
- https://access.redhat.com/errata/RHSA-2026:6277
- https://access.redhat.com/errata/RHSA-2026:6278
- https://access.redhat.com/errata/RHSA-2026:6428
- https://access.redhat.com/errata/RHSA-2026:6429
- https://access.redhat.com/errata/RHSA-2026:6497
- https://access.redhat.com/errata/RHSA-2026:6554
- https://access.redhat.com/errata/RHSA-2026:6564
- https://access.redhat.com/errata/RHSA-2026:6567
- https://access.redhat.com/errata/RHSA-2026:6568
- https://access.redhat.com/errata/RHSA-2026:7052
- https://access.redhat.com/errata/RHSA-2026:7249
- https://access.redhat.com/errata/RHSA-2026:7291
- https://access.redhat.com/errata/RHSA-2026:7385
- https://access.redhat.com/errata/RHSA-2026:7676
- https://access.redhat.com/errata/RHSA-2026:7854
- https://access.redhat.com/errata/RHSA-2026:7942
- https://access.redhat.com/errata/RHSA-2026:8151
- https://access.redhat.com/errata/RHSA-2026:8167
- https://access.redhat.com/errata/RHSA-2026:8218
- https://access.redhat.com/errata/RHSA-2026:8229
- https://access.redhat.com/errata/RHSA-2026:8337
- https://access.redhat.com/errata/RHSA-2026:8338
- https://access.redhat.com/errata/RHSA-2026:8431
- https://access.redhat.com/errata/RHSA-2026:8433
- https://access.redhat.com/errata/RHSA-2026:8483
- https://access.redhat.com/errata/RHSA-2026:9097
- https://access.redhat.com/errata/RHSA-2026:9098
- https://access.redhat.com/errata/RHSA-2026:9108
- https://access.redhat.com/errata/RHSA-2026:9109
- https://access.redhat.com/errata/RHSA-2026:9848
- https://access.redhat.com/security/cve/CVE-2025-61726
- https://bugzilla.redhat.com/show_bug.cgi?id=2434432
- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61726.json