NetSight
IP …
high7.5

CVE-2026-33814

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a va…

Impact

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

Affected products

VendorProductAffected versions
GolangGo
before 1.25.10
from 1.26.0 before 1.26.3
GolangHttp2
before 0.53.0

Weakness classification

CWE-835CWE-606

References