CLEANSTART-2026-EJ93145 attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames

🗓️ 07 Apr 2026 00:44:04Reported by GoogleType

osv🔗 osv.dev👁 10 Views

Attacker may cause an HTTP/2 endpoint to read header data by sending excess CONTINUATION frames in kube-state-metrics.

Reporter	Title	Published	Views	Family All 10651
OSV	MINI-63XJ-R85F-V357	16 Jul 202607:51	–	osv
OSV	MINI-643G-637F-6V8J	5 Jun 202611:24	–	osv
OSV	MINI-647P-CPMR-GC66	19 Jul 202508:22	–	osv
OSV	MINI-649P-5QCV-5PQW	7 Jun 202619:24	–	osv
OSV	MINI-64MV-RWQ6-FC2Q	21 Jun 202612:40	–	osv
OSV	MINI-64RF-FXM6-JPP3	7 Jun 202619:24	–	osv
OSV	MINI-64RW-P5QQ-QW2P	16 May 202621:15	–	osv
OSV	MINI-64V8-6P5G-3HV9	4 Mar 202605:23	–	osv
OSV	MINI-64W9-VCC7-2C5R	14 Jul 202613:30	–	osv
OSV	MINI-6522-4PV2-G4H9	5 Jun 202610:43	–	osv

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-EJ93145.json
osv	www.osv.dev/vulnerability/CVE-2023-45288
osv	www.osv.dev/vulnerability/CVE-2024-24786
osv	www.osv.dev/vulnerability/CVE-2024-45338
osv	www.osv.dev/vulnerability/CVE-2025-22868
osv	www.osv.dev/vulnerability/CVE-2025-22869
osv	www.osv.dev/vulnerability/CVE-2025-22872
osv	www.osv.dev/vulnerability/CVE-2025-47911
osv	www.osv.dev/vulnerability/CVE-2025-47913
osv	www.osv.dev/vulnerability/CVE-2025-47914

09 Apr 2026 05:30Current

7.2High risk

Vulners AI Score7.2

CVSS 3.19.8

EPSS0.91969