CVE-2026-27141 Sending certain HTTP/2 frames can cause a server to panic in golang.org/x/net

[
  {
    "vendor": "golang.org/x/net",
    "product": "golang.org/x/net/http2",
    "collectionURL": "https://pkg.go.dev",
    "packageName": "golang.org/x/net/http2",
    "versions": [
      {
        "version": "0.50.0",
        "lessThan": "0.51.0",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "programRoutines": [
      {
        "name": "typeFrameParser"
      },
      {
        "name": "ClientConn.Close"
      },
      {
        "name": "ClientConn.Ping"
      },
      {
        "name": "ClientConn.RoundTrip"
      },
      {
        "name": "ClientConn.Shutdown"
      },
      {
        "name": "ConfigureServer"
      },
      {
        "name": "ConfigureTransport"
      },
      {
        "name": "ConfigureTransports"
      },
      {
        "name": "ConnectionError.Error"
      },
      {
        "name": "ErrCode.String"
      },
      {
        "name": "FrameHeader.String"
      },
      {
        "name": "FrameType.String"
      },
      {
        "name": "FrameWriteRequest.String"
      },
      {
        "name": "Framer.ReadFrame"
      },
      {
        "name": "Framer.ReadFrameForHeader"
      },
      {
        "name": "Framer.ReadFrameHeader"
      },
      {
        "name": "Framer.WriteContinuation"
      },
      {
        "name": "Framer.WriteData"
      },
      {
        "name": "Framer.WriteDataPadded"
      },
      {
        "name": "Framer.WriteGoAway"
      },
      {
        "name": "Framer.WriteHeaders"
      },
      {
        "name": "Framer.WritePing"
      },
      {
        "name": "Framer.WritePriority"
      },
      {
        "name": "Framer.WritePriorityUpdate"
      },
      {
        "name": "Framer.WritePushPromise"
      },
      {
        "name": "Framer.WriteRSTStream"
      },
      {
        "name": "Framer.WriteRawFrame"
      },
      {
        "name": "Framer.WriteSettings"
      },
      {
        "name": "Framer.WriteSettingsAck"
      },
      {
        "name": "Framer.WriteWindowUpdate"
      },
      {
        "name": "GoAwayError.Error"
      },
      {
        "name": "ReadFrameHeader"
      },
      {
        "name": "Server.ServeConn"
      },
      {
        "name": "Setting.String"
      },
      {
        "name": "SettingID.String"
      },
      {
        "name": "SettingsFrame.ForeachSetting"
      },
      {
        "name": "StreamError.Error"
      },
      {
        "name": "Transport.CloseIdleConnections"
      },
      {
        "name": "Transport.NewClientConn"
      },
      {
        "name": "Transport.RoundTrip"
      },
      {
        "name": "Transport.RoundTripOpt"
      },
      {
        "name": "bufferedWriter.Flush"
      },
      {
        "name": "bufferedWriter.Write"
      },
      {
        "name": "bufferedWriterTimeoutWriter.Write"
      },
      {
        "name": "chunkWriter.Write"
      },
      {
        "name": "clientConnPool.GetClientConn"
      },
      {
        "name": "connError.Error"
      },
      {
        "name": "dataBuffer.Read"
      },
      {
        "name": "duplicatePseudoHeaderError.Error"
      },
      {
        "name": "gzipReader.Close"
      },
      {
        "name": "gzipReader.Read"
      },
      {
        "name": "headerFieldNameError.Error"
      },
      {
        "name": "headerFieldValueError.Error"
      },
      {
        "name": "netHTTPClientConn.Close"
      },
      {
        "name": "netHTTPClientConn.RoundTrip"
      },
      {
        "name": "noDialClientConnPool.GetClientConn"
      },
      {
        "name": "noDialH2RoundTripper.NewClientConn"
      },
      {
        "name": "noDialH2RoundTripper.RoundTrip"
      },
      {
        "name": "pipe.Read"
      },
      {
        "name": "priorityWriteSchedulerRFC7540.CloseStream"
      },
      {
        "name": "priorityWriteSchedulerRFC7540.OpenStream"
      },
      {
        "name": "priorityWriteSchedulerRFC9218.OpenStream"
      },
      {
        "name": "pseudoHeaderError.Error"
      },
      {
        "name": "requestBody.Close"
      },
      {
        "name": "requestBody.Read"
      },
      {
        "name": "responseWriter.Flush"
      },
      {
        "name": "responseWriter.FlushError"
      },
      {
        "name": "responseWriter.Push"
      },
      {
        "name": "responseWriter.SetReadDeadline"
      },
      {
        "name": "responseWriter.SetWriteDeadline"
      },
      {
        "name": "responseWriter.Write"
      },
      {
        "name": "responseWriter.WriteHeader"
      },
      {
        "name": "responseWriter.WriteString"
      },
      {
        "name": "roundRobinWriteScheduler.OpenStream"
      },
      {
        "name": "serverConn.CloseConn"
      },
      {
        "name": "serverConn.Flush"
      },
      {
        "name": "stickyErrWriter.Write"
      },
      {
        "name": "transportResponseBody.Close"
      },
      {
        "name": "transportResponseBody.Read"
      },
      {
        "name": "unencryptedTransport.RoundTrip"
      },
      {
        "name": "writeData.String"
      }
    ],
    "defaultStatus": "unaffected"
  }
]