In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| golang.org/x/net(Go) | 0 | 0.0.0-20220906165146-f3363e06e74c | N/A |
| golang.org/x/net/http2(Go) | 0 | 0.0.0-20220906165146-f3363e06e74c | N/A |
CVSS Metrics
