imroc/req
GitHub
Releases210
Frequency2 weeks 1 day
Last Release
Stars4.82K
Simple Go HTTP client with Black Magic
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| — | 9.8 CRITICAL | — | ||
The req package before 3.43.4 for Go may send an unintended request when a malformed URL is provided, because cleanHost in http.go intentionally uses a "garbage in, garbage out" design. | ||||