golang.org/x/net: HTTP/2 transport accepts malformed framing-related headers in net/http
HTTP/2 transport accepts malformed framing-related headers in net/http. GO-2026-6610, BIT-golang-2026-78660, CVE-2026-78660.
osv.devquote checked
- security advisory
- Your code9 things to find
Nemotron fixes
In its own wordsmatches the page ✓
HTTP/2 transport accepts malformed framing-related headers in net/http
What Teire looks for in your code
- golang.org/x/net/http2.Transport.NewClientConn (go)
- golang.org/x/net/http2.Transport.RoundTrip (go)
- golang.org/x/net/http2.Transport.RoundTripOpt (go)
- golang.org/x/net/http2.clientConnPool.GetClientConn (go)
- golang.org/x/net/http2.clientConnReadLoop.handleResponse (go)
- golang.org/x/net/http2.noDialClientConnPool.GetClientConn (go)
- golang.org/x/net/http2.noDialH2RoundTripper.NewClientConn (go)
- golang.org/x/net/http2.noDialH2RoundTripper.RoundTrip (go)
- golang.org/x/net/http2.unencryptedTransport.RoundTrip (go)
Does it reach your code?