CVE-2026-63202

"BinaryHttpParser" decodes Binary HTTP RFC 9292 messages. An OHTTP gateway/client built on this library feeds the decrypted OHTTP body straight into "BinaryHttpParser.parse...". The field-section decoding loop terminates only on the exact condition "fieldSectionLength != 0" and relies on a Java...

PT-2026-80787

BinaryHttpParser: Unauthenticated CPU-exhaustion DoS via infinite loop in field-section decoding - ID: BHTTP-LOOP-001 - Severity: High - CVSS v3.1: 7.5 — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CWE: CWE-835 Loop with Unreachable Exit Condition — secondary CWE-400 Uncontrolled Resource...