[security] golang.org/x/net fix pre-announcement

Hello gophers,

We plan to issue a security fix for the packages golang.org/x/net/proxy and golang.org/x/net/http/httpproxy in the golang.org/x/net module during US business hours on Tuesday, March 4.

This will cover the following CVEs:

• CVE-2025-22870

Following our security policy, this is the pre-announcement of the fix.

Thanks,
The Go team