Skip to contentGo Standard Library Net/url vulnerabilities
- go standard library net/urlAvoid quadratic complexity in resolvePath in net/urlCVE-2026-56860Fix available5.9 Medium
- go standard library net/url, golang go, red hat assisted installer for red hat openshift container platform 2 +143 more +145 moreIncorrect parsing of IPv6 host literals in net/urlCVE-2026-25679Fix available7.5 High
- go standard library net/url, golang go, red hat assisted installer for red hat openshift container platform 2 +160 more +162 moreMemory exhaustion in query parameter parsing in net/urlCVE-2025-61726Fix available7.5 High
- go standard library net/url, golang go +1 moreInsufficient validation of bracketed IPv6 hostnames in net/urlCVE-2025-47912Fix available5.3 Medium
- go standard library net/url, golang go +1 moreFailure to strip relative path components in net/urlCVE-2022-32190Fix available7.5 High