vulnerability · Fri 02 Oct 2026 · 23:09 UTC
GHSA-cjcg-cxmh-9wcr: Praxis affected by HTTP/2 Bomb
Filed UTCSource GTH ↗
Multiple denial-of-service vulnerabilities have been discovered in HTTP/2 server implementations. All have been rated with a severity impact of [Important](https://access.redhat.com/security/updates/classification). The vulnerabilities target HPACK, the header compression scheme in HTTP/2, where a small request can trigger large memory allocations on the server. ### Details Credit to the original researcher, I'm mostly just run their tool against the code base. …
Signals
as the pipeline stamped them- High
- High-risk vulnerability — CVSS 7.5
Get the next one first.
Every dispatch goes to Telegram and RSS the moment it is published, and the whole wire is a keyless JSON API.
Check your stack
Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.
Stack checkNo key. No signup.