Product by Go Standard Library
Net/url
5 known vulnerabilities in Net/url (Go Standard Library), 0 of them actively exploited (CISA KEV).
Key figures
5
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-61726 | Memory exhaustion in query parameter parsing in net/url | 7.5 | |
| High | CVE-2022-32190 | Failure to strip relative path components in net/url | 7.5 | |
| High | CVE-2026-25679 | Incorrect parsing of IPv6 host literals in net/url | 7.5 | |
| Medium | CVE-2026-56860 | Avoid quadratic complexity in resolvePath in net/url | 5.9 | |
| Medium | CVE-2025-47912 | Insufficient validation of bracketed IPv6 hostnames in net/url | 5.3 |