Go/golang.org/x/net CVE-2023-39325: unknown, EPSS 3.80%

HTTP/2 rapid reset can cause excessive work in net/http

Action: Upgrade golang.org/x/net to 0.17.0 or later.

go get golang.org/x/net@v0.17.0

Affected

Fixed versions

Sources

• osv: GO-2023-2102#Go/golang.org/x/net
• https://go.dev/issue/63417
• https://go.dev/cl/534215
• https://go.dev/cl/534235
• https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ

CVE-2023-39325 · published 2023-10-11T16:49:53Z · modified 2026-09-28T10:56:56.146690341Z · JSON