4 Total advisories
4 Vulnerabilities
0 Malware
Dependency scanning
Check whether golang.org/x/net/http2 is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
MEDIUM 5.3
CVE-2022-41717
golang.org/x/net/http2 vulnerable to possible excessive memory growth
MEDIUM 5.3
CVE-2023-45288
net/http, x/net/http2: close connections when receiving too many headers
HIGH 7.5
CVE-2022-27664
golang.org/x/net/http2 Denial of Service vulnerability
HIGH 7.5
CVE-2021-44716
golang.org/x/net/http2 allows uncontrolled memory consumption
Browse more Go advisories
Learn What is SAST?
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes