)]}'
{
  "commit": "1e71bd86e4a302b4e731bc06da6eb51679c7bd49",
  "tree": "9b9a38b202194200be862182fa9fe35067d4640f",
  "parents": [
    "7bca15042b9d2bda1402cb42232a9c6ddbae6212"
  ],
  "author": {
    "name": "Nicholas S. Husin",
    "email": "nsh@golang.org",
    "time": "Tue Mar 31 15:15:30 2026 -0400"
  },
  "committer": {
    "name": "Nicholas Husin",
    "email": "nsh@golang.org",
    "time": "Tue Mar 31 15:18:17 2026 -0700"
  },
  "message": "http2: prevent hanging Transport due to bad SETTINGS frame\n\nThis CL backports https://go.dev/cl/761581 to x/net.\n\nFixes golang/go#78476\nFixes CVE-2026-33814\n\nChange-Id: Ied435a51fdd8664d41dae14d082c39c76a6a6964\nReviewed-on: https://go-review.googlesource.com/c/net/+/761640\nLUCI-TryBot-Result: Go LUCI \u003cgolang-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nReviewed-by: Nicholas Husin \u003chusin@google.com\u003e\nReviewed-by: Damien Neil \u003cdneil@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "2e9c2f6a52b45ffc7508732ef18e52a83f149c04",
      "old_mode": 33188,
      "old_path": "http2/transport.go",
      "new_id": "8132233310c1763bbd7d0eea2a256ecfc5702eb5",
      "new_mode": 33188,
      "new_path": "http2/transport.go"
    },
    {
      "type": "modify",
      "old_id": "d948b881a3596ee45491365b5c08ecbd60c49c2f",
      "old_mode": 33188,
      "old_path": "http2/transport_test.go",
      "new_id": "9068375177bf4b6cb7a6688b55a9ddd58ebf02ac",
      "new_mode": 33188,
      "new_path": "http2/transport_test.go"
    }
  ]
}
