Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-58469.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-58469
Upstream
Published
2025-03-12T19:15:38Z
Modified
2026-04-01T05:19:18.247321Z
Summary
CVE-2025-22870 affecting package packer for versions less than 1.9.5-9
Details

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

References

Affected packages

Azure Linux:3 / packer

Package

Name
packer
Purl
pkg:rpm/azure-linux/packer

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.9.5-9

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-58469.json"