kazu-yamamoto/http2

kazu-yamamoto/http2

GitHubGitHub
GitHubgithub.com
Releases92
Frequency1 month 2 weeks
Last Release
Stars90
HTTP/2.0 library including HPACK
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2023-44487NVD↗
< 0.17.0, < 4.2.27.5 HIGH—

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.