EUVD-2026-2663

Malicious code in transitive-req PyPI...

Malicious code in puny-req (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b37178e16f3045461008067eca9077a2b41c9c0809b2fd8b3082038a7b74ab3 The package puny-req was found to contain malicious code. Source: ghsa-malware 4ed85c7d479a94c8140d2a0d11769e23097d68af45d550610438f446986c3cbb Any...

MAL-2025-5947 Malicious code in pino-req (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2659b9b4bc1c25e48f12927e3b920f8b1eacccf6ddd951b110537a31a062ccf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-45258

The req package before 3.43.4 for Go may send an unintended request when a malformed URL is provided, because cleanHost in http.go intentionally uses a "garbage in, garbage out" design...

CVE-2024-45258

The req package before 3.43.4 for Go may send an unintended request when a malformed URL is provided, because cleanHost in http.go intentionally uses a "garbage in, garbage out" design...

CVE-2024-45258

The req package before 3.43.4 for Go may send an unintended request when a malformed URL is provided, because cleanHost in http.go intentionally uses a "garbage in, garbage out" design...

CVE-2024-45258

The req package before 3.43.4 for Go may send an unintended request when a malformed URL is provided, because cleanHost in http.go intentionally uses a "garbage in, garbage out" design...

CVE-2024-45258

The req package before 3.43.4 for Go may send an unintended request when a malformed URL is provided, because cleanHost in http.go intentionally uses a "garbage in, garbage out" design...

PT-2024-31514 · Req · Req

Name of the Vulnerable Software and Affected Versions: req package versions prior to 3.43.4 Description: The req package may send an unintended request when a malformed URL is provided, due to the cleanHost function in http.go using a "garbage in, garbage out" design. This can lead to security...

CVE-2024-45258

CVE-2024-45258 affects the Go req package prior to 3.43.4. The root cause is the cleanHost implementation in http.go using a “garbage in, garbage out” design, which may cause the library to send an unintended HTTP request when a malformed URL is provided. Public documents describe potential secur...