Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix vulnerability: GO-2024-2687 #65

Merged
merged 1 commit into from
Apr 11, 2024
Merged

Fix vulnerability: GO-2024-2687 #65

merged 1 commit into from
Apr 11, 2024

Conversation

alexandear
Copy link
Owner

Vulnerability #1: GO-2024-2687
    HTTP/2 CONTINUATION flood in net/http
  More info: https://pkg.go.dev/vuln/GO-2024-2687
  Module: golang.org/x/net
    Found in: golang.org/x/net@v0.19.0
    Fixed in: golang.org/x/net@v0.23.0

  Standard library
    Found in: net/http@go1.22.1
    Fixed in: net/http@go1.22.2

@alexandear alexandear merged commit 334718c into main Apr 11, 2024
5 checks passed
@alexandear alexandear deleted the fix-GO-2024-2687 branch April 11, 2024 13:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant