CLEANSTART-2026-EJ93145 attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames

🗓️ 07 Apr 2026 00:44:04Reported by GoogleType

osv🔗 osv.dev👁 18 Views

Attacker may cause an HTTP/2 endpoint to read header data by sending excess CONTINUATION frames in kube-state-metrics.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	30 Jan 202609:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Go affects IBM Robotic Process Automation for Cloud Pak	6 Aug 202513:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to glibc, Golang Go , Apache HTTP, IBM GSKit-Crypto and GnuTLS packages/liberaries .	22 May 202409:19	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been addressed in IBM Verify Identity Access OIDC Provider (CVE-2024-45337, CVE-2025-22869)	9 Jul 202504:16	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, Golang Go, HTTP/2, NGINX, OpenSSH, Linux kernel might affect IBM Spectrum Protect Plus	4 Feb 202518:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Data Virtualization on Cloud Pak for Data (March 2025)	27 Mar 202516:18	–	ibm
IBM Security Bulletins	Security Bulletin: Impacted IBM optim versions 1.0.0, 1.1.0 by vulnerability in golang.org/x/crypto/ssh/agent	21 Sep 202614:22	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Golang Go, multiple vulnerabilities affect IBM Cloud Pak System	4 Jul 202600:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.0-IF005 and 24.0.1-IF002.	2 May 202507:23	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-EJ93145.json
osv	www.osv.dev/vulnerability/CVE-2023-45288
osv	www.osv.dev/vulnerability/CVE-2024-24786
osv	www.osv.dev/vulnerability/CVE-2024-45338
osv	www.osv.dev/vulnerability/CVE-2025-22868
osv	www.osv.dev/vulnerability/CVE-2025-22869
osv	www.osv.dev/vulnerability/CVE-2025-22872
osv	www.osv.dev/vulnerability/CVE-2025-47911
osv	www.osv.dev/vulnerability/CVE-2025-47913
osv	www.osv.dev/vulnerability/CVE-2025-47914

18 Sep 2026 12:15Current

7.2High risk

Vulners AI Score7.2

CVSS 3.19.8

EPSS0.91969