4 matches found
CVE-2026-93488 Io.netty/netty-codec-http: netty: denial of service via unbounded concurrent spdy streams
A flaw was found in Netty. SpdySessionHandler accepts an unlimited number of concurrent remote-initiated streams because localConcurrentStreams defaults to Integer.MAXVALUE and the handler provides no API to change it. A remote peer can open a SPDY connection and send a large number of SYNSTREAM...
CVE-2026-93488
CVE-2026-93488 affects Netty's SpdySessionHandler in the io.netty/netty-codec-http component. The handler's localConcurrentStreams field defaults to Integer.MAX_VALUE with no public API to modify it, allowing a remote peer to open a SPDY connection and send a large number of SYN_STREAM frames wit...
CLEANSTART-2026-WL14185 spdystream is a Go library for multiplexing streams over SPDY connections
Multiple security vulnerabilities affect the velero-fips package. spdystream is a Go library for multiplexing streams over SPDY connections. See references for individual vulnerability details...