Go/golang.org/x/net CVE-2022-41721: unknown, EPSS 1.82%

Request smuggling due to improper request handling in golang.org/x/net/http2/h2c

Action: Upgrade golang.org/x/net to 0.1.1-0.20221104162952-702349b0e862 or later.

go get golang.org/x/net@v0.1.1-0.20221104162952-702349b0e862

Affected

Fixed versions

Sources

• osv: GO-2023-1495
• https://go.dev/issue/56352
• https://go.dev/cl/447396

CVE-2022-41721 · published 2023-01-13T22:39:40Z · modified 2026-08-07T08:12:27.419936139Z · JSON