Executive brief
Sending certain HTTP/2 frames can cause a server to panic in golang.org/x/net
Affected products
- Go golang.org/x/net
Junglewise Threat Intelligence
CVE-2026-27141: GO-2026-4559 - Sending certain HTTP/2 frames can cause a server to panic in golang.org/x/net
CVE-2026-27141 · Severity: info · Published 2026-02-26
Technologies: golang.org/x/net (Go). Vendors: Go.
Related threats
- Google Go x/net denial of service in dnsmessage parsing
- Golang net/html Cross-Site Scripting via incorrect namespaced element parsing
- Google Go x/net/html XSS via incorrect foreign content parsing
- Go x/net idna privilege escalation via Punycode decoding
- Golang x/net/html XSS via duplicate attribute parsing