GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2600: Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-2963: Denial of service due to improper 100-continue handling in net/http

  GO-2025-3420: Sensitive headers incorrectly sent after cross-domain redirect in net/http

  GO-2025-3503: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

  GO-2025-3751: Sensitive headers not cleared on cross-origin redirect in net/http

  GO-2025-4012: Lack of limit when parsing cookies can cause memory exhaustion in net/http

  GO-2026-4918: Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net