Golang.Org/X/Net/Http/Httpproxy vulnerabilities

1 vulnerability

Known vulnerabilities in Golang.Org/X/Net/Http/Httpproxy, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

RoutineCVE-2025-22870go standard library · net/http +2689 moreHTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netMatching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.CVSS4.4MediumEPSS0.43%