~ / search / GHSA-vvpx-j8f3-3w6h

GHSA-vvpx-j8f3-3w6h

golang.org/x/net vulnerable to Uncontrolled Resource Consumption

Source: GitHub Advisory Database (reviewed) High CVE-2022-41723

Packages

EcosystemPackageAffectedFixed in
Go golang.org/x/net < 0.7.0 0.7.0

Details

As written in the advisory (Markdown source, shown as plain text).

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.

References

External links from the advisory. They lead to third-party sites.