Go/golang.org/x/net CVE-2023-45288: unknown, EPSS 91.97%

HTTP/2 CONTINUATION flood in net/http

Action: Upgrade golang.org/x/net to 0.23.0 or later.

go get golang.org/x/net@v0.23.0

Affected

Fixed versions

Sources

• osv: GO-2024-2687#Go/golang.org/x/net
• https://go.dev/issue/65051
• https://go.dev/cl/576155
• https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M

CVE-2023-45288 · published 2024-04-03T21:12:01Z · modified 2026-02-04T04:09:31.762399Z · JSON