~ / search / GHSA-rg3p-p27c-2f39

GHSA-rg3p-p27c-2f39

gohttp is vulnerable to directory traversal via a crafted request

Source: GitHub Advisory Database (reviewed) High CVE-2025-70950

Packages

EcosystemPackageAffectedFixed in
Go github.com/itang/gohttp <= 0.0.0-20170713062009-34ea516ae408 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An issue in gohttp commit 34ea51 allows attackers to execute a directory traversal via supplying a crafted request.

References

External links from the advisory. They lead to third-party sites.