imroc github.com/imroc/req/v3 vulnerabilities

Latest imroc github.com/imroc/req/v3 CVEs

Newest publication first

1. CVE-2024-45258 req may send an unintended request when a malformed URL is provided

   Medium·CVSS 6.9

   The req library is a widely used HTTP library in Go. However, it does not handle malformed URLs effectively. As a result, after parsing a malformed URL, the library may send HTTP requests to unexpected destinations, potentially leading to security vulnerabilities or unintended be...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.