CVE-2026-97054

The Go standard library 's net/http package is vulnerable to a race condition in HTTP/1 servers . When a MaxBytesReader or MaxBytesHandler exceeds its limit, the