Net/url
This hub aggregates every CVE we track for Net/url, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
5
CVEs tracked
0
Critical
3
High
0
In CISA KEV
Severity distribution
HIGH3MEDIUM2
Monthly trend
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
1
0
1
0
0
0
0
1
0
2024-102026-09
Latest CVEs
The 5 most recently published vulnerabilities affecting Net/url.
- CVE-2026-56860Avoid quadratic complexity in resolvePath in net/url5.9
- CVE-2026-25679Incorrect parsing of IPv6 host literals in net/url7.5
- CVE-2025-61726Memory exhaustion in query parameter parsing in net/url7.5
- CVE-2025-47912Insufficient validation of bracketed IPv6 hostnames in net/url5.3
- CVE-2022-32190Failure to strip relative path components in net/url7.5
Product normalization is registry-driven with AI assist and human review. How it works