H2c vulnerabilities

1 known vulnerability in H2c from Go. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  golang.org/x/net/http2/h2c: Inconsistent Interpretation of HTTP Requests

  CVE-2022-41721Jan 13, 2023Golang.org/x/netEPSS 1.88%

  A request smuggling attack is possible when using MaxBytesHandler. When using MaxBytesHandler, the body of an HTTP request is not fully consumed. When the server attempts to read HTTP2 frames from the connection, it will instead be reading the body of the HTTP