tocsin

Alpine/go: high 7.5

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.

Action: Upgrade go to 1.21.3-r0 or later.

Affected

introducedfixedlast affected
1.20.01.21.3-r0-

Fixed versions

1.21.3-r0

Sources

published · modified · JSON