VYPR
← All advisories
High severityNVD Advisory· Published Feb 28, 2023· Updated May 5, 2025

Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

CVE-2022-41723

Description

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
golang.org/x/netGo
< 0.7.00.7.0

Affected products

337

Patches

Vulnerability mechanics

References

25

News mentions

0

No linked articles in our index yet.