Количество 14
Количество 14
CVE-2026-78660
Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling.
CVE-2026-78660
Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling.
CVE-2026-78660
Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling.
CVE-2026-78660
HTTP/2 transport accepts malformed framing-related headers in net/http
CVE-2026-78660
Historically, we have been rather lax about malformed framing-related ...
openSUSE-SU-2026:22095-1
Security update for go1.26
SUSE-SU-2026:4629-1
Security update for go1.26
openSUSE-SU-2026:22093-1
Security update for go1.27
SUSE-SU-2026:4625-1
Security update for go1.27
RLSA-2026:86203
Important: go-toolset:rhel8 security, bug fix, and enhancement update
RLSA-2026:86196
Important: golang security, bug fix, and enhancement update
RLSA-2026:86093
Important: golang security, bug fix, and enhancement update
SUSE-SU-2026:4867-1
Security update for go1.26-openssl
SUSE-SU-2026:4866-1
Security update for go1.26-openssl
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-78660 Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling. | CVSS3: 7.5 | 0% Низкий | 18 дней назад |
 | CVE-2026-78660 Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling. | CVSS3: 7.5 | 0% Низкий | 18 дней назад |
 | CVE-2026-78660 Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling. | CVSS3: 7.5 | 0% Низкий | 18 дней назад |
 | CVE-2026-78660 HTTP/2 transport accepts malformed framing-related headers in net/http | CVSS3: 7.5 | 0% Низкий | 16 дней назад |
| CVE-2026-78660 Historically, we have been rather lax about malformed framing-related ... | CVSS3: 7.5 | 0% Низкий | 18 дней назад |
 | openSUSE-SU-2026:22095-1 Security update for go1.26 | 13 дней назад | ||
| SUSE-SU-2026:4629-1 Security update for go1.26 | 14 дней назад | ||
| openSUSE-SU-2026:22093-1 Security update for go1.27 | 13 дней назад | ||
| SUSE-SU-2026:4625-1 Security update for go1.27 | 15 дней назад | ||
 | RLSA-2026:86203 Important: go-toolset:rhel8 security, bug fix, and enhancement update | 6 дней назад | ||
| RLSA-2026:86196 Important: golang security, bug fix, and enhancement update | 5 дней назад | ||
| RLSA-2026:86093 Important: golang security, bug fix, and enhancement update | 5 дней назад | ||
| SUSE-SU-2026:4867-1 Security update for go1.26-openssl | 4 дня назад | ||
| SUSE-SU-2026:4866-1 Security update for go1.26-openssl | 4 дня назад |
Уязвимостей на страницу