Product by Golang

    Http2

    5 known vulnerabilities in Http2 (Golang), 1 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Http2 (Golang)
    CriticalCVE-2023-44487

    HTTP/2 Rapid Reset Attack Vulnerability

    In CISA KEValso in 160 other products

    7.5
    HighCVE-2022-41723

    Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

    also in 4 other products

    7.5
    HighCVE-2023-39325

    HTTP/2 rapid reset can cause excessive work in net/http

    also in 7 other products

    7.5
    MediumCVE-2022-41717

    Excessive memory growth in net/http and golang.org/x/net/http2

    also in 6 other products

    5.3
    HighCVE-2026-33814

    Golang.org/x/net/http2: Infinite Loop

    also in 7 other products

    7.5

    All products by Golang