CVE-2026-33814

[opensourceways-bot]

一、漏洞信息
漏洞编号：CVE-2026-33814
漏洞归属组件：net
漏洞归属分支：默认分支
漏洞归属的版本：v0.23.0
漏洞修复版本: 0.53.0
CVSS分值：
 BaseScore： 7.5 High
 Vector： CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

漏洞简述：
When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

漏洞公开时间：2026-05-07 20:16:42
漏洞创建时间：2026-06-24 02:58:26
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2026-33814

[opensourceways-bot]

Welcome To opensourceways Community

Hey @opensourceways-bot , thanks for your contribution to the community.

Bot Usage Manual

I'm the Bot here serving you. You can find the instructions on how to interact with me at Here . That means you can comment below every pull request or issue to trigger Bot Commands.

Contact Guide

If you have any questions, please contact the SIG: infratructure ,
and any of the maintainers: @GeorgeCao-hw, @TangJia025, @pkking, @zhongjun2 ,
and any of the committers: @123-prog, @Coopermasaaki, @LiYanghang00, @TangJia025, @ibfru, @yao-xiaobai .