req vulnerabilities
1 known vulnerability in req from Imroc. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
The req package before 3.43.4 for Go may send an unintended request when a malformed URL is…
The req package before 3.43.4 for Go may send an unintended request when a malformed URL is provided, because cleanHost in http.go intentionally uses a "garbage in, garbage out" design.