quic/

Sep 9, 2025 GO-2026-4440 +1 more

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Aug 7, 2025 GO-2026-4440 +1 more

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Jul 10, 2025 GO-2026-4440 +1 more

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Jun 5, 2025 GO-2026-4440 +1 more

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

May 5, 2025 GO-2026-4440 +1 more

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Apr 7, 2025 GO-2026-4440 +1 more

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Mar 27, 2025 GO-2026-4440 +1 more

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Mar 5, 2025 GO-2025-3595 +2 more

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Mar 4, 2025 GO-2025-3595 +2 more

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Feb 10, 2025 GO-2025-3503 +3 more

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Jan 6, 2025 GO-2025-3503 +3 more

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Dec 18, 2024 GO-2025-3503 +3 more

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Dec 4, 2024 GO-2024-3333 +4 more

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Nov 8, 2024 GO-2024-3333 +4 more

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Oct 4, 2024 GO-2024-3333 +4 more

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Sep 5, 2024 GO-2024-3333 +4 more

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Aug 6, 2024 GO-2024-3333 +4 more

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Jul 5, 2024 GO-2024-3333 +4 more

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Jun 4, 2024 GO-2024-3333 +4 more

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

May 6, 2024 GO-2024-3333 +4 more

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Apr 4, 2024 GO-2024-3333 +4 more

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Apr 3, 2024 GO-2024-3333 +4 more

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Mar 4, 2024 GO-2024-2687 +5 more

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Feb 7, 2024 GO-2024-2687 +5 more

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Jan 8, 2024 GO-2024-2687 +5 more

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Nov 27, 2023 GO-2024-2687 +5 more

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Changes in this version

+ const QLogLevelConn

+ const QLogLevelEndpoint

+ const QLogLevelFrame

+ const QLogLevelPacket

type Config

+ HandshakeTimeout time.Duration

+ KeepAlivePeriod time.Duration

+ MaxIdleTimeout time.Duration

+ QLogLogger *slog.Logger

+ type Endpoint struct

+ func (e *Endpoint) Accept(ctx context.Context) (*Conn, error)

+ func (e *Endpoint) Close(ctx context.Context) error

+ func (e *Endpoint) Dial(ctx context.Context, network, address string) (*Conn, error)

+ func (e *Endpoint) LocalAddr() netip.AddrPort

type Stream

+ func (s *Stream) Flush()

Nov 8, 2023 GO-2024-2687 +5 more

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Changes in this version

type Config

+ RequireAddressValidation bool

+ StatelessResetKey [32]byte

Oct 10, 2023 GO-2024-2687 +5 more

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Oct 5, 2023 GO-2023-2102 +6 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Changes in this version

type ApplicationError

+ func (e *ApplicationError) Is(err error) bool

type Config

+ MaxBidiRemoteStreams int64

+ MaxConnReadBufferSize int64

+ MaxStreamReadBufferSize int64

+ MaxStreamWriteBufferSize int64

+ MaxUniRemoteStreams int64

type Conn

+ func (c *Conn) Abort(err error)

+ func (c *Conn) Close() error

+ func (c *Conn) Wait(ctx context.Context) error

+ type Listener struct

+ func Listen(network, address string, config *Config) (*Listener, error)

+ func (l *Listener) Accept(ctx context.Context) (*Conn, error)

+ func (l *Listener) Close(ctx context.Context) error

+ func (l *Listener) Dial(ctx context.Context, network, address string) (*Conn, error)

+ func (l *Listener) LocalAddr() netip.AddrPort

Sep 5, 2023 GO-2023-2102 +6 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Changes in this version

type Config

+ StreamReadBufferSize int64

+ StreamWriteBufferSize int64

type Stream

+ func (s *Stream) Close() error

+ func (s *Stream) CloseContext(ctx context.Context) error

+ func (s *Stream) CloseRead()

+ func (s *Stream) CloseWrite()

+ func (s *Stream) Reset(code uint64)

+ type StreamErrorCode uint64

+ func (e StreamErrorCode) Error() string

Aug 4, 2023 GO-2023-2102 +6 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Changes in this version

type Conn

+ func (c *Conn) AcceptStream(ctx context.Context) (*Stream, error)

+ func (c *Conn) NewSendOnlyStream(ctx context.Context) (*Stream, error)

+ func (c *Conn) NewStream(ctx context.Context) (*Stream, error)

+ type Stream struct

+ func (s *Stream) IsReadOnly() bool

+ func (s *Stream) IsWriteOnly() bool

+ func (s *Stream) Read(b []byte) (n int, err error)

+ func (s *Stream) ReadContext(ctx context.Context, b []byte) (n int, err error)

+ func (s *Stream) Write(b []byte) (n int, err error)

+ func (s *Stream) WriteContext(ctx context.Context, b []byte) (n int, err error)

Aug 1, 2023 GO-2023-2102 +6 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Changes in this version

+ type ApplicationError struct

+ Code uint64

+ Reason string

+ func (e ApplicationError) Error() string

+ type Config struct

+ TLSConfig *tls.Config

+ type Conn struct

+ func (c *Conn) String() string

Jul 5, 2023 GO-2023-1988 +7 more

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net

Jun 13, 2023 GO-2023-1988 +7 more

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3595: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

  GO-2026-4440: Quadratic parsing complexity in golang.org/x/net/html

  GO-2026-4441: Infinite parsing loop in golang.org/x/net