A vulnerability classified as critical was found in req Package up to 3.43.3 on Go. This vulnerability affects the function cleanHost of the component URL Handler. The manipulation leads to missing initialization of a variable.

This vulnerability was named CVE-2024-45258. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.