Skip to content

Vulnerabilities of golang.org/x/net golang.org/x/net/http2

Is your version affected?

CVE Summary Score Published
CVE-2026-78663 The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream… 9.1 Critical Oct 8, 2026

Other golang.org/x/net products