Security Advisories

CGA-9v59-fc73-h7hh

Published

Last updated

https://images.chainguard.dev/security/CGA-9v59-fc73-h7hh

Package

hey

Latest Update

Fixed

Fixed Version

0.1.4-r3

Aliases

Severity

7.5

High

CVSS V3

Summary

golang.org/x/net/http2 Denial of Service vulnerability

Description

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

References

Updates

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CGA-9v59-fc73-h7hh

Severity

Summary

Description

References

Updates

Product

Why Chainguard

Customers

Company

Resources