Skip to content

v0.43.0-sec.3 fixes CVE-2026-33814 for Go 1.23.0

Choose a tag to compare

View all tags
@jkaurredhat jkaurredhat released this 17 Aug 19:11
· 206 commits to master since this release
v0.43.0-sec.3
d7ceedb
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

CVE: CVE-2026-33814
Upstream: https://go.dev/cl/761640

What's Changed

  • [Go 1.23.0] CVE-2026-33814: http2: prevent hanging Transport due to bad SETTINGS frame by @jkaurredhat in #10

Full Changelog: v0.43.0-sec.2...v0.43.0-sec.3

Contributors

jkaurredhat
Assets 2
Loading