| CVE-2026-56860 |
Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer…
|
5.9
Medium
|
Aug 13, 2026 |
| CVE-2026-25679 |
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs
|
7.5
High
|
Mar 6, 2026 |
| CVE-2025-61726 |
The net/url package does not set a limit on the number of query parameters in a query
|
7.5
High
|
Jan 28, 2026 |
| CVE-2025-47912 |
The Parse function permits values other than IPv6 addresses to be included in square brackets within the host…
|
5.3
Medium
|
Oct 29, 2025 |
| CVE-2022-32190 |
JoinPath and URL.JoinPath do not remove ../ path elements appended to a relative path
|
Not rated
|
Sep 13, 2022 |