G
Vendor security profile
golang.org/x/net
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs8
Critical2
CISA KEV0
Public exploit0
Patch rate%100
Avg. CVSS8.0
12-month vulnerability rate
0
0
0
0
0
0
2
0
1
0
0
5
CVE KEV
CVE severity distribution
8toplam CVE
Critical2 (25%)
High6 (75%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%0
Public exploit
8Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
7.5
CVE-2026-97032HTTP/2 server crash due to HPACK encoder race in net/http
Patch verifiedEPSS %0
9.1
CVE-2026-78663Double flow control refund on HTTP/2 server streams in net/http
Patch verifiedEPSS %1
7.5
CVE-2026-78669Excessive CPU consumption from repeated initial window changes in net/http
Patch verifiedEPSS %1
7.5
CVE-2026-78660HTTP/2 transport accepts malformed framing-related headers in net/http
Patch verifiedEPSS %0
7.5
CVE-2026-78659HTTP/2 server memory exhaustion due to Trailer headers in net/http
Patch verifiedEPSS %1
7.5
9.6