blobfuse2

2 results · Clear filters · Feed

• Critical 9.1
  CVE-2026-78663

  Double flow control refund on HTTP/2 server streams in net/http

  The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client…

  Go standard library golang.org/x/net net/http golang.org/x/net/http2 Debian Ubuntu Azure Linux Alpine Wolfi Go
  Oct 8, 2026
• Critical 9.8
  CVE-2026-27143

  Missing bound checks can lead to memory corruption in safe Go in cmd/compile

  Arithmetic over induction variables in loops were not correctly checked for underflow or overflow. As a result, the compiler would allow for invalid indexing to occur at runtime, potentially leading to memory corruption.

  Go toolchain cmd/compile katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Apr 8, 2026