GO
Product
golang.org/x/net/http2
by golang.org/x/net · last CVE Oct 8, 2026
7
CVEs
0
On KEV
9.1
Max CVSS
5
New 30D
Severity mix
Critical 1High 6Medium 0Low 0
Watch

Add golang.org/x/net/http2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-78663
9.1
1%
Oct 8
Double flow control refund on HTTP/2 server streams in net/http
Affected: before 0.60.0
Showing 1