CVE-2026-97054 | Google net/http up to 1.26.10/1.27.3 Synchronization MaxBytesReader missing synchronization

A vulnerability classified as problematic has been found in Google net and http up to 1.26.10/1.27.3. The affected element is the function MaxBytesReader of the component Synchronization. This manipulation causes missing synchronization.

This vulnerability is registered as CVE-2026-97054. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More