Vulnerabilities of Go standard library net/http/httputil
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-56866 | When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the… | 7.5 High | Oct 8, 2026 |
| CVE-2026-39825 | ReverseProxy can forward queries containing parameters not visible to Rewrite functions | 5.3 Medium | May 7, 2026 |
| CVE-2022-2880 | Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable… | Not rated | Oct 14, 2022 |