CVE-2026-111103

The mtrudel bandit web framework (versions 1.9.0 before 1.14.0 ) contains an Improper Cleanup on Thrown Exception vulnerability in its HTTP/2 handler. When a frame raises a StreamError during chunk processing in Bandit.HTTP2.Handler.handle_data/3, the system sends a RST_STREAM but rolls back conn...