Go Standard Library Net Http vulnerabilities

CVE-2024-45336 [MEDIUM] CVE-2024-45336: The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a requ The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ containing an Authorization header which is redirected to b.com/ will not send that header to b.com. In the event that the client received a subsequent same-domain redirect, however, the sensitive headers would be restored. For example, a chain

CVE-2025-58186 [MEDIUM] CVE-2025-58186: Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does no Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption.

CVE-2023-45289 [MEDIUM] CVE-2023-45289: When following an HTTP redirect to a domain which is not a subdomain match or exact match of the ini When following an HTTP redirect to a domain which is not a subdomain match or exact match of the initial domain, an http.Client does not forward sensitive headers such as "Authorization" or "Cookie". For example, a redirect from foo.com to www.foo.com will forward the Authorization header, but a redirect to bar.com will not. A maliciously crafted HTTP redir

CVE-2025-22870 [MEDIUM] CWE-115 CVE-2025-22870: Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname componen Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.