Denial of Service via Eager Array Allocation During Deserialization in Guava

Code Execution in Host Sentry Process via Double Free in gVisor VFS MemoryFile

HTTP/2 server crash due to HPACK encoder race in net/http

HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http

Double flow control refund on HTTP/2 server streams in net/http

Excessive CPU consumption from repeated initial window changes in net/http

HTTP/2 transport accepts malformed framing-related headers in net/http

Lack of limit on size of parsed Range headers in net/http

Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart

Reject malformed ECH outer extension references in crypto/tls