Repository navigation
security: fix CVE-2026-78659 [1.26 backport] #81917
Description
@thatnealpatel requested issue #81857 to be considered for backport to the next 1.26 minor release.
@gopherbot Please open backports for this security issue.
@thatnealpatel requested issue #81857 to be considered for backport to the next 1.26 minor release.
@gopherbot Please open backports for this security issue.
Activity
gopherbot commentedon Oct 8, 2026
Change https://go.dev/cl/847111 mentions this issue:
[release-branch.go1.26] net/http: bundled HTTP/2 vuln fixes[release-branch.go1.26] net/http: bundled HTTP/2 vuln fixes
gopherbot commentedon Oct 8, 2026
Closed by merging CL 847111 (commit 6e04952) to
release-branch.go1.26.gopherbot commentedon Oct 8, 2026
Change https://go.dev/cl/847352 mentions this issue:
[internal-branch.go1.26-vendor] http2: apply header limits to Trailer headers too[internal-branch.go1.26-vendor] http2: apply header limits to Trailer…