Security Tracking IssueDo not make this issue public.Flaw:CVE-2023-39325 golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)
https://bugzilla.redhat.com/show_bug.cgi?id=2243296A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded to the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing.This CVE is specific to golang, but is also tracked as CVE-2023-44487.

1.
2.
3.