Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/05 9:46 p.m.17 views

Plug.Cowboy vulnerable to unauthenticated remote DoS via HTTP/2 `:scheme` atom-table exhaustion

Summary An unauthenticated remote denial-of-service vulnerability in Plug.Cowboy.Conn allows any attacker who can reach an HTTPS Plug.Cowboy listener via HTTP/2 to permanently exhaust the BEAM atom table and crash the entire Erlang VM. Am I Affected? All users running plugcowboy with HTTP/2 may b...

8.7CVSS5.9AI score0.00545EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder