CVE-2022-41723
Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net
A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.
CVSS 3.1 · 7.5 High
EPSS 4.6%
KEV · Not listed
Vendors
Products