What’s Vulnerable › Products

Go standard library net/http/httputil vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Go standard library net/http/httputil version is affected

Latest Go standard library net/http/httputil vulnerabilities

• CVE-2026-56866 — HTTP/1 client connection desynchronization after CONNECT rejection in net/http (CVSS 7.5)