tocsin

Alpine/go: high 7.5

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_

Action: Upgrade go to 1.26.9-r0 or later.

Affected

introducedfixedlast affected
01.26.9-r0-

Fixed versions

1.26.9-r0

Sources

published · modified · JSON