Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-44716
7.5
HIGHCVSS v3
Published
January 1, 2022
CVSS v2
5 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.
GitHub