Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-58419.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-58419
Upstream
Published
2025-03-12T19:15:38Z
Modified
2026-04-01T05:19:17.647507Z
Summary
CVE-2025-22870 affecting package influxdb for versions less than 2.7.5-4
Details

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

References

Affected packages

Azure Linux:3 / influxdb

Package

Name
influxdb
Purl
pkg:rpm/azure-linux/influxdb

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.7.5-4

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-58419.json"