See how go compares to other vendors in security performance
Double flow control refund on HTTP/2 server streams in net/http
HTTP/2 server memory exhaustion due to Trailer headers in net/http
A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values.