Description

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

INFO

Published Date :

2026-05-07T19:41:17.631Z

Last Modified :

2026-05-07T19:41:17.631Z

Source :

Go
AFFECTED PRODUCTS

The following products are affected by CVE-2026-33814 vulnerability.

Vendors Products
Go Standard Library
  • Net/http
Golang
  • Http2
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-33814.

URL Resource
https://go.dev/cl/761581 cve-icon cve-icon
https://go.dev/cl/761640 cve-icon cve-icon
https://go.dev/issue/78476 cve-icon cve-icon
https://groups.google.com/g/golang-announce/c/qcCIEXso47M cve-icon cve-icon
https://pkg.go.dev/vuln/GO-2026-4918 cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System