Vulnerability GO-2026-6611

Unknown

8 hours ago

Excessive CPU consumption from repeated initial window changes in net/http

v0.1.0 - v0.59.0

Summary

Excessive CPU consumption from repeated initial window changes in net/http

Details

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.

References

Related Vulnerabilities

Other vulnerabilities affecting the same packages

Unknown

8 hours ago

Reset context tracking on consecutive template expressions in html/template

<1.26.9 GO-2026-6599

Unknown

8 hours ago

Recognize yield as regexp preceder keyword in html/template

<1.26.9 GO-2026-6600

Unknown

8 hours ago

HTTP/2 server memory exhaustion due to Trailer headers in net/http

<0.60.0 GO-2026-6603

Unknown

8 hours ago

HTTP/2 server memory exhaustion due to Trailer headers in net/http

<1.26.9, >=1.27.0-0 <1.27.2 GO-2026-6603

Unknown

8 hours ago

Root.Mkdir(All) can follow junctions out of the root on Windows in os

<1.26.9 GO-2026-6604

View all vulnerabilities for these packages

Impacted packages

Timeline

Published

8 hours ago

Last Modified

8 hours ago