golang.org/x/net: Double flow control refund on HTTP/2 server streams in net/http · Teiregolang.org/x/net: Double flow control refund on HTTP/2 server streams in net/http
Double flow control refund on HTTP/2 server streams in net/http. GO-2026-6612, BIT-golang-2026-78663, CVE-2026-78663.
golang.org/x/net: Double flow control refund on HTTP/2 server streams in net/http: from its source to your code
osv.devquote checked- security advisory
- Your code88 things to find
Nemotron fixes
In its own wordsmatches the page ✓ Double flow control refund on HTTP/2 server streams in net/http
osv.dev/vulnerability/GO-2026-6612from an advisory databasechecked 2026-10-30#d2e944f30fWhat Teire looks for in your code
- golang.org/x/net/http2.ClientConn.Close (go)
- golang.org/x/net/http2.ClientConn.Ping (go)
- golang.org/x/net/http2.ClientConn.RoundTrip (go)
- golang.org/x/net/http2.ClientConn.Shutdown (go)
- golang.org/x/net/http2.ConfigureServer (go)
- golang.org/x/net/http2.ConfigureTransport (go)
- golang.org/x/net/http2.ConfigureTransports (go)
- golang.org/x/net/http2.ConnectionError.Error (go)
- golang.org/x/net/http2.ErrCode.String (go)
- golang.org/x/net/http2.FrameHeader.String (go)
- golang.org/x/net/http2.FrameType.String (go)
- golang.org/x/net/http2.FrameWriteRequest.String (go)
- golang.org/x/net/http2.Framer.ReadFrame (go)
- golang.org/x/net/http2.Framer.ReadFrameForHeader (go)