A vulnerability was found in net-http up to 1.21.11/1.22.4 on Go. It has been classified as problematic. Affected is an unknown function of the file net/http. The manipulation leads to denial of service.

This vulnerability is traded as CVE-2024-24791. Access to the local network is required for this attack to succeed. There is no exploit available.

It is recommended to upgrade the affected component.