| Package | Affected versions | Patched versions |
|---|---|---|
| golang.org/x/net | < 0.0.0-20211209124913-491a49abca63 | 0.0.0-20211209124913-491a49abca63 |
| golang.org/x/net/http2 | < 0.0.0-20211209124913-491a49abca63 | 0.0.0-20211209124913-491a49abca63 |
| stdlib | ≥ 1.17.0-0, < 1.17.5< 1.16.12 | 1.17.51.16.12 |
| go | ≥ 1.17.0, < 1.17.5< 1.16.12 | 1.17.51.16.12 |
net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free