Vulnérabilités de Go standard library net/http/internal/http2
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2026-78663 | The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream… | 9.1 Critique | 8 oct. 2026 |
| CVE-2026-39821 | The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label | 9.6 Critique | 22 mai 2026 |