Astra Linux – vulnerability in golang-golang-x-net

Go’s net/http versions prior to 1.16.12 and 1.17.x prior to 1.17.5 allow uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests...