Lucene search
+L

CVE-2026-97054: Go standard library net/http: For HTTP/1 servers, when MaxBytesReader's limit is exceeded, "Connection: close" header is automatically set without…

🗓️ 11 Nov 2026 00:00:00Reported by Rapid7Type 
rapid7
 rapid7
🔗 www.rapid7.com👁 7 Views

Race condition in net/http MaxBytesReader/MaxBytesHandler causes runtime panic.

Related
Refs
ReporterTitlePublishedViews
Family
cgr
Chainguard
CVE-2026-97054 vulnerabilities
11 Nov 202622:55
–cgr
circl
Circl
CVE-2026-97054
11 Nov 202615:21
–circl
cve
CVE
CVE-2026-97054
11 Nov 202603:13
–cve
cvelist
Cvelist
CVE-2026-97054 HTTP/1 server crash due to MaxBytesReader header race in net/http
11 Nov 202603:13
–cvelist
debiancve
Debian CVE
CVE-2026-97054
11 Nov 202602:49
–debiancve
euvd
EUVD
EUVD-2026-123113
11 Nov 202603:13
–euvd
mend
Mend
CVE-2026-97054
11 Nov 202603:13
–mend
nvd
NVD
CVE-2026-97054
11 Nov 202605:19
–nvd
osv_cga
osv_cga
CGA-2293-2RP4-2MC5
12 Nov 202600:14
–osv_cga
osv_cga
osv_cga
CGA-22H2-65R6-37GW
12 Nov 202601:03
–osv_cga
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

12 Nov 2026 00:00Current
6.1Medium risk
Vulners AI Score6.1
EPSS0.00171
7