HT
Product
Http2
by Golang · last CVE May 7, 2026
On CISA KEVExploited in the wild
5
CVEs
1
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 1Low 0
Watch

Add Http2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-41717
5.3
6%
Dec 8
An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests
Affected: before 0.4.0
Showing 1