GO
Product
golang.org/x/net/http2
by golang.org/x/net · last CVE Oct 8, 2026
11
CVEs
0
On KEV
9.1
Max CVSS
5
New 30D
Severity mix
Critical 1High 9Medium 1Low 0
Watch

Add golang.org/x/net/http2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-41717
5.3
6%
Dec 8
Excessive memory growth in net/http and golang.org/x/net/http2
Affected: before 0.4.0
Showing 1