CVE-2026-56853

ADVISORY - golang

Summary

When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this.

Common Weakness Enumeration (CWE)

Impacted images

Advisories

GoLang

CREATED

2 hours ago

UPDATED

2 hours ago

ADVISORY IDGO-2026-6089⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY