Apache bRPC resource management error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a security vulnerability. This vulnerability arises because the HTTP/2 h2 receive path fails to enforce endpoint restrictions such as SETTINGSMAXCONCURRENTSTREAMS and SETTINGSMAXHEADERLISTSIZE. As a result, write limits on control frames are bypasse...