CVE-2026-27141

golang.org/x/net/http2

Medium priority: severe, but no known exploitation

Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

In the news