golang.org/x/net: Excessive CPU consumption from repeated initial window changes in net/http · Teiregolang.org/x/net: Excessive CPU consumption from repeated initial window changes in net/http
Excessive CPU consumption from repeated initial window changes in net/http. GO-2026-6611, BIT-golang-2026-78669, CVE-2026-78669.
golang.org/x/net: Excessive CPU consumption from repeated initial window changes in net/http: from its source to your code
osv.devquote checked- security advisory
- Your code101 things to find

Nemotron fixes
In its own wordsmatches the page ✓ Excessive CPU consumption from repeated initial window changes in net/http
osv.dev/vulnerability/GO-2026-6611from an advisory databasechecked 2026-10-30#8438440792What Teire looks for in your code
- golang.org/x/net/http2.ClientConn.Close (go)
- golang.org/x/net/http2.ClientConn.Ping (go)
- golang.org/x/net/http2.ClientConn.RoundTrip (go)
- golang.org/x/net/http2.ClientConn.Shutdown (go)
- golang.org/x/net/http2.ClientConn.addStreamLocked (go)
- golang.org/x/net/http2.ConfigureServer (go)
- golang.org/x/net/http2.ConfigureTransport (go)
- golang.org/x/net/http2.ConfigureTransports (go)
- golang.org/x/net/http2.ConnectionError.Error (go)
- golang.org/x/net/http2.ErrCode.String (go)
- golang.org/x/net/http2.FrameHeader.String (go)
- golang.org/x/net/http2.FrameType.String (go)
- golang.org/x/net/http2.FrameWriteRequest.Consume (go)
golang.org/x/net/http2.FrameWriteRequest.String (go)golang.org/x/net/http2.Framer.ReadFrame (go)golang.org/x/net/http2.Framer.ReadFrameForHeader (go)golang.org/x/net/http2.Framer.ReadFrameHeader (go)golang.org/x/net/http2.Framer.WriteContinuation (go)golang.org/x/net/http2.Framer.WriteData (go)golang.org/x/net/http2.Framer.WriteDataPadded (go)golang.org/x/net/http2.Framer.WriteGoAway (go)golang.org/x/net/http2.Framer.WriteHeaders (go)golang.org/x/net/http2.Framer.WritePing (go)golang.org/x/net/http2.Framer.WritePriority (go)golang.org/x/net/http2.Framer.WritePriorityUpdate (go)golang.org/x/net/http2.Framer.WritePushPromise (go)golang.org/x/net/http2.Framer.WriteRSTStream (go)golang.org/x/net/http2.Framer.WriteRawFrame (go)golang.org/x/net/http2.Framer.WriteSettings (go)golang.org/x/net/http2.Framer.WriteSettingsAck (go)golang.org/x/net/http2.Framer.WriteWindowUpdate (go)golang.org/x/net/http2.GoAwayError.Error (go)golang.org/x/net/http2.ReadFrameHeader (go)golang.org/x/net/http2.Server.ServeConn (go)golang.org/x/net/http2.Server.serveConn (go)golang.org/x/net/http2.Setting.String (go)golang.org/x/net/http2.SettingID.String (go)golang.org/x/net/http2.SettingsFrame.ForeachSetting (go)golang.org/x/net/http2.StreamError.Error (go)golang.org/x/net/http2.Transport.CloseIdleConnections (go)golang.org/x/net/http2.Transport.NewClientConn (go)golang.org/x/net/http2.Transport.RoundTrip (go)golang.org/x/net/http2.Transport.RoundTripOpt (go)golang.org/x/net/http2.Transport.newClientConn (go)golang.org/x/net/http2.bufferedWriter.Flush (go)golang.org/x/net/http2.bufferedWriter.Write (go)golang.org/x/net/http2.bufferedWriterTimeoutWriter.Write (go)golang.org/x/net/http2.chunkWriter.Write (go)golang.org/x/net/http2.clientConnPool.GetClientConn (go)golang.org/x/net/http2.clientConnReadLoop.processSettingsNoWrite (go)golang.org/x/net/http2.clientConnReadLoop.processWindowUpdate (go)golang.org/x/net/http2.clientConnReadLoop.streamByID (go)golang.org/x/net/http2.clientStream.awaitFlowControl (go)golang.org/x/net/http2.clientStream.cleanupWriteRequest (go)golang.org/x/net/http2.connError.Error (go)golang.org/x/net/http2.dataBuffer.Read (go)golang.org/x/net/http2.duplicatePseudoHeaderError.Error (go)golang.org/x/net/http2.gzipReader.Close (go)golang.org/x/net/http2.gzipReader.Read (go)golang.org/x/net/http2.headerFieldNameError.Error (go)golang.org/x/net/http2.headerFieldValueError.Error (go)golang.org/x/net/http2.netHTTPClientConn.Close (go)golang.org/x/net/http2.netHTTPClientConn.RoundTrip (go)golang.org/x/net/http2.noDialClientConnPool.GetClientConn (go)golang.org/x/net/http2.noDialH2RoundTripper.NewClientConn (go)golang.org/x/net/http2.noDialH2RoundTripper.RoundTrip (go)golang.org/x/net/http2.outflow.add (go)golang.org/x/net/http2.outflow.available (go)golang.org/x/net/http2.outflow.setConnFlow (go)golang.org/x/net/http2.outflow.take (go)golang.org/x/net/http2.pipe.Read (go)golang.org/x/net/http2.priorityWriteSchedulerRFC7540.CloseStream (go)golang.org/x/net/http2.priorityWriteSchedulerRFC7540.OpenStream (go)golang.org/x/net/http2.priorityWriteSchedulerRFC7540.Pop (go)golang.org/x/net/http2.priorityWriteSchedulerRFC9218.OpenStream (go)golang.org/x/net/http2.priorityWriteSchedulerRFC9218.Pop (go)golang.org/x/net/http2.pseudoHeaderError.Error (go)golang.org/x/net/http2.randomWriteScheduler.Pop (go)golang.org/x/net/http2.requestBody.Close (go)golang.org/x/net/http2.requestBody.Read (go)golang.org/x/net/http2.responseWriter.Flush (go)golang.org/x/net/http2.responseWriter.FlushError (go)golang.org/x/net/http2.responseWriter.Push (go)golang.org/x/net/http2.responseWriter.SetReadDeadline (go)golang.org/x/net/http2.responseWriter.SetWriteDeadline (go)golang.org/x/net/http2.responseWriter.Write (go)golang.org/x/net/http2.responseWriter.WriteHeader (go)golang.org/x/net/http2.responseWriter.WriteString (go)golang.org/x/net/http2.roundRobinWriteScheduler.OpenStream (go)golang.org/x/net/http2.roundRobinWriteScheduler.Pop (go)golang.org/x/net/http2.serverConn.CloseConn (go)golang.org/x/net/http2.serverConn.Flush (go)golang.org/x/net/http2.serverConn.newStream (go)golang.org/x/net/http2.serverConn.processSettingInitialWindowSize (go)golang.org/x/net/http2.serverConn.processWindowUpdate (go)golang.org/x/net/http2.serverConn.scheduleFrameWrite (go)golang.org/x/net/http2.stickyErrWriter.Write (go)golang.org/x/net/http2.transportResponseBody.Close (go)golang.org/x/net/http2.transportResponseBody.Read (go)golang.org/x/net/http2.unencryptedTransport.RoundTrip (go)golang.org/x/net/http2.writeData.String (go)