The patched issues span core standard library components including archive/zip and net/http, as well as security-sensitive ...
A previous virtually identical zero day DoS vulnerability was targeted in the wild, and there's already a PoC for this one.