golang.org/x/net: HTTP/2 server memory exhaustion due to Trailer headers in net/http · Teiregolang.org/x/net: HTTP/2 server memory exhaustion due to Trailer headers in net/http
HTTP/2 server memory exhaustion due to Trailer headers in net/http. GO-2026-6603, BIT-golang-2026-78659, CVE-2026-78659.
golang.org/x/net: HTTP/2 server memory exhaustion due to Trailer headers in net/http: from its source to your code
osv.devquote checked- security advisory
- Your code81 things to find
Nemotron fixes
In its own wordsmatches the page ✓ HTTP/2 server memory exhaustion due to Trailer headers in net/http
osv.dev/vulnerability/GO-2026-6603from an advisory databasechecked 2026-11-03#401aea2fe8What Teire looks for in your code
- golang.org/x/net/http2.ClientConn.Close (go)
- golang.org/x/net/http2.ClientConn.Ping (go)
- golang.org/x/net/http2.ClientConn.RoundTrip (go)
- golang.org/x/net/http2.ClientConn.Shutdown (go)
- golang.org/x/net/http2.ConfigureServer (go)
- golang.org/x/net/http2.ConfigureTransport (go)
- golang.org/x/net/http2.ConfigureTransports (go)
- golang.org/x/net/http2.ConnectionError.Error (go)
- golang.org/x/net/http2.ErrCode.String (go)
- golang.org/x/net/http2.FrameHeader.String (go)
- golang.org/x/net/http2.FrameType.String (go)
- golang.org/x/net/http2.FrameWriteRequest.String (go)
- golang.org/x/net/http2.Framer.ReadFrame (go)
- golang.org/x/net/http2.Framer.ReadFrameForHeader (go)