EEF-CVE-2026-123635 Refused calls drain the HTTP/2 connection flow-control window in elixir-grpc grpc_server

Summary Missing Release of Resource after Effective Lifetime vulnerability in elixir-grpc grpcserver allows a client to stall all later calls on a shared HTTP/2 connection via calls that the server refuses while their DATA frames are in flight. The stream handler grpcstreamh...