-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerable functions were identified based on the information from the Go vulnerability database (pkg.go.dev/vuln/GO-2025-3420), which explicitly lists the affected symbols in the net/http package. The vulnerability description indicates that the issue lies in how the HTTP client handles sensitive headers during a specific sequence of redirects. The listed functions are all entry points for making HTTP requests and are therefore directly involved in the vulnerable behavior. Without access to the specific commit diff, the list of affected symbols is the most reliable source for identifying the functions that would appear in a runtime profile when the vulnerability is triggered.