Security Advisory
CVE-2024-45258
9.8
CRITICAL
Vulnerability Description
The req package before 3.43.4 for Go may send an unintended request when a malformed URL is provided, because cleanHost in http.go intentionally uses a "garbage in, garbage out" design.
Published Date
August 25, 2024
Official Source
NIST NVD Advisory