Known Vulnerabilities for Net/http by Go Standard Library
Listed below are 10 of the newest known vulnerabilities associated with "Net/http" by "Go Standard Library".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-115319 json | fzf 0.36.0 through 0.74.5 contains an inefficient algorithmic complexity vulnerability in maskActionContents that allows loca... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-114730 json | Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side request forgery filter bypass. The... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-114657 json | Grav from 2.0.0 before 2.2.5 contains an information disclosure vulnerability that allows page authors to capture visitors' H... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-114641 json | Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and Kerberos (Negotiate) backend authen... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-114640 json | Traefik from v3.7.0 before v3.7.14 contains an authentication bypass vulnerability in its Kubernetes Ingress-NGINX provider t... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-114636 json | Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTTP rou... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-114635 json | Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped when r... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-114574 json | A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/... | Not Provided | 2026-10-22 | 2026-10-21 |
| CVE-2026-114472 json | Insufficient resource pool in the ACME HTTP-01 challenge responder of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-114470 json | Cross-site request forgery in the REST API of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote attacker to m... | Not Provided | 2026-10-21 | 2026-10-21 |