CVE-2025-70950

Impact

An issue in gohttp commit 34ea51 allows attackers to execute a directory traversal via supplying a crafted request.

Affected packages

Weakness classification

References

• NVD record
• CVE.org record
• GitHub advisory
• https://github.com/advisories/GHSA-rg3p-p27c-2f39
• https://nvd.nist.gov/vuln/detail/CVE-2025-70950
• https://github.com/itang/gohttp/issues/13
• https://gist.github.com/Lime-Cocoa/202127ae5f4dcc4b39909ce7ac1c8466