Findings

CVE-2025-70950

An issue in gohttp commit 34ea51 allows attackers to execute a directory traversal via supplying a crafted request.

Published May 19, 2026 · updated Jul 24, 2026

An issue in gohttp commit 34ea51 allows attackers to execute a directory traversal via supplying a crafted request.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. May 19, 2026 · NIST NVD

    Detected

    An issue in gohttp commit 34ea51 allows attackers to execute a directory traversal via supplying a crafted request.

  2. Jul 24, 2026 · NIST NVD

    Updated

    An issue in gohttp commit 34ea51 allows attackers to execute a directory traversal via supplying a crafted request.

Sources

  • CVE.orgVulnerability recordCVE-2025-70950

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2025-70950

    An issue in gohttp commit 34ea51 allows attackers to execute a directory traversal via supplying a crafted request.

    nvd.nist.gov

References