The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
{ "severity": "Critical", "cpes": [ "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*" ] }