{"action":"Upgrade golang.org/x/net to 0.4.0 or later.","affected":[{"fixed":"0.4.0","introduced":"0"}],"component":"golang.org/x/net","cve_ids":["CVE-2022-41717"],"ecosystem":"Go","epss":0.06077,"exploited":false,"fixed_versions":["0.4.0"],"ghsa_id":"GHSA-xrjj-mj9h-534m","id":"tcs_01M5KFSQ22572Q6NJ52XZY700Q","modified_at":"2026-09-10T03:49:50.728612708Z","published_at":"2022-12-08T21:30:19Z","references":["https://osv.dev/vulnerability/GHSA-xrjj-mj9h-534m","https://nvd.nist.gov/vuln/detail/CVE-2022-41717","https://security.gentoo.org/glsa/202311-09","https://pkg.go.dev/vuln/GO-2022-1144","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WPEIZ7AMEJCZXU3FEJZMVRNHQZXX5P3I","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QBKBAZBIOXZV5QCFHZNSVXULR32XJCYD","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q52IQI754YAE4XPR4QBRWPIVZWYGZ4FS","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PW3XC47AUW5J5M2ULJX7WCCL3B2ETLMT","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PUM4DIVOLJCBK5ZDP4LJOL24GXT3YSIR","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NQGNAXK3YBPMUP3J4TECIRDHFGW37522","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CSVIS6MTMFVBA7JPMRAUNKUOYEVSJYSB","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ANIOPUXWIHVRA6CEWXCGOMX3YYS6KFHG","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/56B2FFESRYYP6IY2AZ3UWXLWKZ5IYZN4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4SBIUECMLNC572P23DDOKJNKPJVX26SP","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2","https://groups.google.com/g/golang-announce/c/L_3rmdT0BMU/m/yZDrXjIiBQAJ","https://go.dev/issue/56350","https://go.dev/cl/455717","https://go.dev/cl/455635","https://cs.opensource.google/go/x/net"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-xrjj-mj9h-534m#Go/golang.org/x/net","url":"https://osv.dev/vulnerability/GHSA-xrjj-mj9h-534m"}],"summary":"golang.org/x/net/http2 vulnerable to possible excessive memory growth"}