Go/golang.org/x/net CVE-2021-44716: unknown, EPSS 4.25%

Unbounded memory growth in net/http and golang.org/x/net/http2

Action: Upgrade golang.org/x/net to 0.0.0-20211209124913-491a49abca63 or later.

go get golang.org/x/net@v0.0.0-20211209124913-491a49abca63

Affected

Fixed versions

Sources

• osv: GO-2022-0288#Go/golang.org/x/net
• https://go.dev/cl/369794
• https://go.dev/issue/50058
• https://groups.google.com/g/golang-announce/c/hcmEScgc00k

CVE-2021-44716 · published 2022-07-15T23:08:33Z · modified 2024-05-20T16:03:47Z · JSON