golang.org/x/net: HTTP/2 server crash due to HPACK encoder race in net/http · Teiregolang.org/x/net: HTTP/2 server crash due to HPACK encoder race in net/http
HTTP/2 server crash due to HPACK encoder race in net/http. GO-2026-6617, BIT-golang-2026-97032, CVE-2026-97032.
golang.org/x/net: HTTP/2 server crash due to HPACK encoder race in net/http: from its source to your code
osv.devquote checked- security advisory
- Your code82 things to find
Nemotron fixes
In its own wordsmatches the page ✓ HTTP/2 server crash due to HPACK encoder race in net/http
osv.dev/vulnerability/GO-2026-6617from an advisory databasechecked 2026-11-05#12dd62e042What Teire looks for in your code
- golang.org/x/net/http2.ClientConn.Close (go)
- golang.org/x/net/http2.ClientConn.Ping (go)
- golang.org/x/net/http2.ClientConn.RoundTrip (go)
- golang.org/x/net/http2.ClientConn.Shutdown (go)
- golang.org/x/net/http2.ConfigureServer (go)
- golang.org/x/net/http2.ConfigureTransport (go)
- golang.org/x/net/http2.ConfigureTransports (go)
- golang.org/x/net/http2.ConnectionError.Error (go)
- golang.org/x/net/http2.ErrCode.String (go)
- golang.org/x/net/http2.FrameHeader.String (go)
- golang.org/x/net/http2.FrameType.String (go)
- golang.org/x/net/http2.FrameWriteRequest.String (go)
- golang.org/x/net/http2.Framer.ReadFrame (go)
- golang.org/x/net/http2.Framer.ReadFrameForHeader (go)