CVE-2026-33814

ADVISORY - golang

Summary

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

Common Weakness Enumeration (CWE)

Impacted images

Advisories

GoLang

CREATED

2 hours ago

UPDATED

2 hours ago

ADVISORY IDGO-2026-4918⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Package	Type	OS Name	OS Version	Affected Ranges	Fix Versions
stdlib	golang	-	-	>=1.26.0-0,<1.26.3	1.26.3
golang.org/x/net	golang	-	-	<0.53.0	0.53.0
stdlib	golang	-	-	<1.25.10	1.25.10

Severity and metrics

No CVSS data available from this advisory.