Login Request a demo
HT
Product
Http2
by Golang · last CVE May 7, 2026
On CISA KEVExploited in the wild
5
CVEs
1
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 4Medium 1Low 0
Severity
All severities5Critical0High4Medium1Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Http2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-44487
In wildKEV
7.5
100%
Oct 10
HTTP/2 Rapid Reset Attack Vulnerability
Affected: before 0.17.0
CVE-2026-33814
7.5
1%
May 7
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net
Affected: before 0.53.0
CVE-2023-39325
7.5
4%
Oct 11
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption
Affected: before 0.17.0
CVE-2022-41723
7.5
5%
Feb 28
A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests
Affected: before 0.7.0
Showing 4