An issue in gohttp commit 34ea51 allows attackers to execute a directory traversal via supplying a crafted request.