Skip to content
OpenAdvisories

Package · Wolfi

crictl-static

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Unscored —
    CVE-2026-97054

    HTTP/1 server crash due to MaxBytesReader header race in net/http

    For HTTP/1 servers, when MaxBytesReader's limit is exceeded, "Connection: close" header is automatically set without synchronization, which might race with another header being set explicitly in the server handler. As a result, an HTTP/1 server that utilizes …

    Go standard library net/http stdlib k3d Debian Wolfi Go