CVE-2019-12159: Gohttp Project Gohttp

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

GoHTTP through 2017-07-25 has a stack-based buffer over-read in the scan function (when called from getRequestType) via a long URL.

Affected products

• Gohttp Project Gohttp: up to and including 2017-07-25

Published 2019-05-17. Last modified 2026-06-17.