Product by Golang.org/x/net

    Golang.org/x/net/http2

    11 known vulnerabilities in Golang.org/x/net/http2 (Golang.org/x/net), 0 of them actively exploited (CISA KEV).

    Key figures

    11

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Golang.org/x/net/http2 (Golang.org/x/net)
    HighCVE-2023-45288

    HTTP/2 CONTINUATION flood in net/http

    also in 2 other products

    		7.5
    HighCVE-2022-41723

    Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

    also in 4 other products

    		7.5
    HighCVE-2023-39325

    HTTP/2 rapid reset can cause excessive work in net/http

    also in 7 other products

    		7.5
    MediumCVE-2022-41717

    Excessive memory growth in net/http and golang.org/x/net/http2

    also in 6 other products

    		5.3
    HighCVE-2026-78659

    HTTP/2 server memory exhaustion due to Trailer headers in net/http

    also in 6 other products

    		7.5
    HighCVE-2026-78663

    Double flow control refund on HTTP/2 server streams in net/http

    also in 6 other products

    		7.5
    HighCVE-2026-78669

    Excessive CPU consumption from repeated initial window changes in net/http

    also in 6 other products

    		7.5
    HighCVE-2026-33814

    Golang.org/x/net/http2: Infinite Loop

    also in 7 other products

    		7.5
    HighCVE-2026-78660

    HTTP/2 transport accepts malformed framing-related headers in net/http

    also in 6 other products

    		7.5
    MediumCVE-2026-97032

    HTTP/2 server crash due to HPACK encoder race in net/http

    also in 5 other products

    		5.9
    HighCVE-2026-27141

    Sending certain HTTP/2 frames can cause a server to panic in golang.org/x/net

    also in 3 other products

    		7.5

    All products by Golang.org/x/net