Vulnerability GO-2025-3751
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 year ago
June 11, 2025 at 04:23 PM UTC
Sensitive headers not cleared on cross-origin redirect in net/http
<1.23.10, >=1.24.0-0 <1.24.4
<1.23.10, >=1.24.0-0 <1.24.4
Summary
Sensitive headers not cleared on cross-origin redirect in net/http
Details
Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
5 days ago
Reset context tracking on consecutive template expressions in html/template
<1.26.9, >=1.27.0-0 <1.27.2 GO-2026-6599
<1.26.9, >=1.27.0-0 <1.27.2 GO-2026-6599
Unknown
5 days ago
Recognize yield as regexp preceder keyword in html/template
<1.26.9, >=1.27.0-0 <1.27.2 GO-2026-6600
<1.26.9, >=1.27.0-0 <1.27.2 GO-2026-6600
Unknown
5 days ago
HTTP/2 server memory exhaustion due to Trailer headers in net/http
<1.26.9, >=1.27.0-0 <1.27.2 GO-2026-6603
<1.26.9, >=1.27.0-0 <1.27.2 GO-2026-6603
Unknown
5 days ago
Root.Mkdir(All) can follow junctions out of the root on Windows in os
<1.26.9, >=1.27.0-0 <1.27.2 GO-2026-6604
<1.26.9, >=1.27.0-0 <1.27.2 GO-2026-6604
Unknown
5 days ago
HTTP/1 client connection desynchronization after CONNECT rejection in net/http
<1.26.9, >=1.27.0-0 <1.27.2 GO-2026-6605
<1.26.9, >=1.27.0-0 <1.27.2 GO-2026-6605
Impacted packages
Timeline
Published
1 year ago
June 11, 2025 at 04:23 PM UTC
Last Modified
4 hours ago
October 14, 2026 at 10:57 AM UTC