4 matches found
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS due to the lack of enforcement of SETTINGSMAXCONCURRENTSTREAMS in HTTP/2 connections. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS due to the lack of enforcement of SETTINGSMAXCONCURRENTSTREAMS in HTTP/2 connections. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS due to the lack of enforcement of SETTINGSMAXCONCURRENTSTREAMS in HTTP/2 connections. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and...
CVE-2026-69203 Http4s Ember HTTP/2: does not enforce SETTINGS_MAX_CONCURRENT_STREAMS
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, An Ember server with HTTP/2 enabled through withHttp2 does not enforce SETTINGSMAXCONCURRENTSTREAMS for peer-created streams. One unauthenticated connection can open an unbounded number of streams, each retaining...