Go/golang.org/x/net CVE-2022-27664: unknown, EPSS 3.49%

Denial of service in net/http and golang.org/x/net/http2

Action: Upgrade golang.org/x/net to 0.0.0-20220906165146-f3363e06e74c or later.

go get golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c

Affected

Fixed versions

Sources

• osv: GO-2022-0969#Go/golang.org/x/net
• https://groups.google.com/g/golang-announce/c/x49AQzIVX-s
• https://go.dev/issue/54658
• https://go.dev/cl/428735

CVE-2022-27664 · published 2022-09-12T20:23:06Z · modified 2026-02-04T02:41:02.475503Z · JSON