EUVD-2026-82977

HTTP/2 and HTTP/3 Extended CONNECT requests are downgraded as regular CONNECT requests...

EUVD-2026-82943

HTTP/1 authority-form CONNECT is translated to malformed HTTP/2 CONNECT with Host-controlled :authority...

EUVD-2026-82945

HTTP/1 absolute-form Host mismatch is translated to HTTP/2 :authority, overriding the request-target authority...

CVE-2026-93568

HTTP/2 and HTTP/3 Extended CONNECT requests are downgraded as regular CONNECT requests...

CVE-2026-93579

Summary Netty's HTTP/2 stack does not validate header field values by default. Genuine prohibited octets — NUL 0x00, LF 0x0A, CR 0x0D — can be set in an HTTP/2 header value and are carried verbatim to the wire outbound and into decoded headers inbound. This violates RFC 9113 §8.2.1 and becomes an...

CVE-2026-93568

CVE-2026-93568 affects io.netty/netty-codec-http2 and io.netty/netty-codec-http3 , where HTTP/2 and HTTP/3 Extended CONNECT requests are incorrectly downgraded as regular CONNECT requests. This can lead to a high integrity impact (CVSS 3.1: 7.5 HIGH , vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N), ...

CVE-2026-93568 Io.netty/netty-codec-http2: io.netty/netty-codec-http3: netty: http/2 and http/3 extended connect requests are downgraded as regular connect requests

HTTP/2 and HTTP/3 Extended CONNECT requests are downgraded as regular CONNECT requests...

CVE-2026-93569

HTTP/1 absolute-form Host mismatch is translated to HTTP/2 :authority, overriding the request-target authority Mitigation See https://github.com/netty/netty/security/advisories/GHSA-cg2g-fxr4-mg8m for fixed versions and remediation guidance...

CVE-2026-93567

Io.netty/netty-codec-http2 is vulnerable when an HTTP/1 authority-form CONNECT request is translated into a malformed HTTP/2 CONNECT frame, resulting in a Host-controlled :authority pseudo-header. This is a network-reachable issue requiring no privileges or user interaction, with a CVSS 3.1 base ...

CVE-2026-93567 Io.netty/netty-codec-http2: http/1 authority-form connect is translated to malformed http/2 connect with host-controlled :authority

HTTP/1 authority-form CONNECT is translated to malformed HTTP/2 CONNECT with Host-controlled :authority...

CVE-2026-93567

HTTP/1 authority-form CONNECT is translated to malformed HTTP/2 CONNECT with Host-controlled :authority Mitigation See https://github.com/netty/netty/security/advisories/GHSA-45h4-vhwh-fmhg for fixed versions and remediation guidance...

http-request-smuggler

HTTP Request Smuggler This Burp Suite extension automatically detects and exploits HTTP Request Smuggling vulnerabilities using advanced desynchronization techniques developed by PortSwigger researcher James Kettle. It supports comprehensive scanning for HTTP/1.1 and HTTP/2-downgrade desync...

http2-bomb

HTTP/2 Bomb — CVE-2026-49975 HTTP/2 Stream Amplification PoC · Docker · Web Console Vulnerability HTTP/2 allows multiplexing multiple streams over a single TCP connection. This PoC crafts specially formed HEADERS frames containing a large number of internal references, forcing the server to...

CVE-2026-93492

A flaw was found in Netty's HTTP/2 HpackEncoder. A remote attacker can exploit this by sending HTTP/2 SETTINGS frames with a very large MAXHEADERTABLESIZE. This causes the HpackEncoder to store an excessive number of unique headers, leading to increased CPU usage and memory consumption, ultimatel...

CVE-2026-23918-Double-free-Apache-httpd-mod_http2

CVE-2026-23918 - Apache httpd modhttp2 PoC This repository contains a proof-of-concept implementation written in Go for a pre-authentication memory corruption scenario affecting Apache httpd with modhttp2. The code in this repository demonstrates a spray-and-trigger approach against a vulnerable...

CVE-2026-93492 Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size

A flaw was found in Netty's HTTP/2 HpackEncoder. A remote attacker can exploit this by sending HTTP/2 SETTINGS frames with a very large MAXHEADERTABLESIZE. This causes the HpackEncoder to store an excessive number of unique headers, leading to increased CPU usage and memory consumption, ultimatel...

CVE-2026-93492

CVE-2026-93492 affects the HpackEncoder in Netty's netty-codec-http2 module. A remote, unauthenticated attacker can trigger a Denial of Service by sending HTTP/2 SETTINGS frames containing a very large MAX_HEADER_TABLE_SIZE , causing the encoder to store an excessive number of unique headers and ...

CVE-2026-93492

A flaw was found in Netty's HTTP/2 HpackEncoder. A remote attacker can exploit this by sending HTTP/2 SETTINGS frames with a very large MAXHEADERTABLESIZE. This causes the HpackEncoder to store an excessive number of unique headers, leading to increased CPU usage and memory consumption, ultimatel...

Envoy-CPU-Exhaustion-Vulnerability-PoC

Envoy CPU Exhaustion Vulnerability PoC This repository contains a proof-of-concept PoC Python script to demonstrate the CPU exhaustion vulnerability in Envoy caused by a flood of CONTINUATION frames. Author: blackmagic 2024 Description Envoy is a cloud-native, open-source edge and service proxy...

CVE-2025-31650

TomcatKiller - CVE-2025-31650 🚨 Proof of Concept PoC for Apache Tomcat HTTP/2 DoS vulnerability CVE-2025-31650 This script triggers a memory exhaustion condition in Apache Tomcat by sending malformed priority headers over HTTP/2. 🎯 Affected Versions Apache Tomcat 9.0.76 – 9.0.102 Apache Tomcat...