CVE-2026-110499

The mtrudel bandit web server (versions 0.3.6 before 1.14.0) is vulnerable to a CWE-770 Resource Exhaustion vulnerability in its HTTP/2 implementation . An unauthenticated remote attacker can cause unbounded memory and CPU growth by advertising a large SETTINGS_HEADER_TABLE_SIZE (up to 2^32-1 byt...