Skip to content

v0.35.0-sec.3 fixes CVE-2026-33814 for Go 1.18

Choose a tag to compare

View all tags
@jkaurredhat jkaurredhat released this 17 Aug 19:21
· 248 commits to master since this release
v0.35.0-sec.3
ccbe933
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

CVE: CVE-2026-33814
Upstream: https://go.dev/cl/761640

What's Changed

  • [Go 1.18] CVE-2026-33814: http2: prevent hanging Transport due to bad SETTINGS frame by @black-dragon74 in #7

Full Changelog: v0.35.0-sec.2...v0.35.0-sec.3

Contributors

black-dragon74
Assets 2
Loading