pwn.watch: Go incident updates https://pwn.watch/t/go Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 22 Oct 2026 16:23:59 GMT [unknown] HTTP/3 QPACK “Header Accordions” memory-amplification DoS: FoxIO blog + PoC published; several stacks still unpatched. https://pwn.watch/i/http3-qpack-header-accordions http3-qpack-header-accordions:2026-10-20:FoxIO blog + PoC published; several stacks still unpatched. Tue, 20 Oct 2026 00:00:00 GMT unknown Status: live, partial [unknown] HTTP/3 QPACK “Header Accordions” memory-amplification DoS: Responsible reports to quic-go, quiche, Bun, aioquic, lsquic, h3. https://pwn.watch/i/http3-qpack-header-accordions http3-qpack-header-accordions:2025-11 → 2026-07:Responsible reports to quic-go, quiche, Bun, aioquic, lsquic, h3. Sat, 01 Nov 2025 00:00:00 GMT unknown Status: live, partial [high] HTTP/2 Rapid Reset: record-breaking DDoS attacks (CVE-2023-44487): Coordinated disclosure by Google, Cloudflare and AWS; CISA adds CVE-2023-44487 to KEV https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487 http2-rapid-reset-ddos-cve-2023-44487:2023-10-10:Coordinated disclosure by Google, Cloudflare and AWS; CISA adds CVE-2023-44487 to KEV Tue, 10 Oct 2023 00:00:00 GMT high Source: https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack Status: closed, patched [high] HTTP/2 Rapid Reset: record-breaking DDoS attacks (CVE-2023-44487): Cloudflare starts seeing unusually large HTTP/2 attacks https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487 http2-rapid-reset-ddos-cve-2023-44487:2023-08-25:Cloudflare starts seeing unusually large HTTP/2 attacks Fri, 25 Aug 2023 00:00:00 GMT high Source: https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/ Status: closed, patched