NE
Product
net/http/httputil
3
CVEs
0
On KEV
7.5
Max CVSS
1
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch
Add net/http/httputil to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-56866 | 7.5 | Oct 8 | HTTP/1 client connection desynchronization after CONNECT rejection in net/http Affected: before 1.26.9; 1.27.0-0 before 1.27.2 |
| CVE-2022-2880 | 7.5 | Oct 14 | Incorrect sanitization of forwarded query parameters in net/http/httputil Affected: before 1.18.7; 1.19.0-0 before 1.19.2 |
Showing 2