How many Go standard library net/url CVEs are in CISA KEV?

None of Go standard library net/url's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Go standard library net/url are affected?

20 distinct Go standard library net/url versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Go standard library net/url CVEs?

Go standard library net/url's CVEs most often map to these CWE weakness types: CWE-1286 (Improper Validation of Syntactic Correctness of Input), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-407 (Inefficient Algorithmic Complexity), CWE-770 (Allocation of Resources Without Limits or Throttling).

What is the average severity of Go standard library net/url CVEs?

The average CVSS base score across Go standard library net/url's scored CVEs is 6.7.

Go standard library net/url Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Go standard library net/url vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Go standard library net/url Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Go standard library net/url has 5 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.7.

Severity and exploitation

How the CVSS severity of Go standard library net/url's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High3

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Go standard library net/url's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No Go standard library net/url CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Go standard library net/url version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.24.121 CVE
< 1.24.81 CVE
< 1.25.131 CVE
< 1.25.81 CVE
1.19.0-0 <= v < 1.19.11 CVE
1.25.0 <= v < 1.25.21 CVE
1.25.0 <= v < 1.25.61 CVE
1.26.0-0 <= v < 1.26.11 CVE
1.26.0-0 <= v < 1.26.61 CVE
1.27.0-0 <= v < 1.27.0-rc.31 CVE

Fixed in

1.19.11 CVE

Common weakness types

The CWE weakness categories most often found in Go standard library net/url CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Go standard library net/url CVEs were published each year.

2022

2025

2026

Other Go standard library products

Browse vulnerabilities for other products by Go standard library.

net/http26 CVEs crypto/x50914 CVEs html/template14 CVEs crypto/tls13 CVEs net/http/internal/http26 CVEs net/textproto6 CVEs os6 CVEs path/filepath

Frequently asked questions

Common questions about Go standard library net/url vulnerabilities.

How many CVEs does Go standard library net/url have?: Go standard library net/url has 5 published CVE records since 2022.
How many Go standard library net/url CVEs are in CISA KEV?: None of Go standard library net/url's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Go standard library net/url vulnerabilities?: No Go standard library net/url CVEs currently have a tracked public exploit in this dataset.
Which versions of Go standard library net/url are affected?: 20 distinct Go standard library net/url versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Go standard library net/url CVEs?: Go standard library net/url's CVEs most often map to these CWE weakness types: CWE-1286 (Improper Validation of Syntactic Correctness of Input), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-407 (Inefficient Algorithmic Complexity), CWE-770 (Allocation of Resources Without Limits or Throttling).
What is the average severity of Go standard library net/url CVEs?: The average CVSS base score across Go standard library net/url's scored CVEs is 6.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Go standard library net/url vulnerabilities

Get an alert for each new Go standard library net/url CVE, with AI-written analysis and remediation steps.

Create an account See pricing