Search: CVE-2025-22871

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 0.8%	CVE-2025-22871Go standard library net/http/internal · HTTP Request Smuggling Critical9.1EPSS 0.8%2025-04-08CVE Database V5CVE-2025-22871 The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext. EPSS 0.8%Vulnerability Go standard library #cwe-444	CVE Database V5	2025-04-08

Page 1 of 1 · 3 duplicate CVE records merged