https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 22:18:11 +0000 https://cve.radiocsirt.org/vuln/rustsec-2024-0332 <p><strong>Affected:</strong> crates.io: h2</p> <p>An attacker can send a flood of CONTINUATION frames, causing `h2` to process them indefinitely. This results in an increase in CPU usage.</p> <p>Tokio task budget helps prevent this from a complete denial-of-service, as the server can still respond to legitimate requests, albeit with increased latency.</p> <p>More details at &#34;https://seanmonstar.com/blog/hyper-http2-continuation-flood/.</p> <p>Patches available for 0.4.x and 0.3.x versions.</p> <p><strong>Affected:</strong> crates.io: h2</p> <p>An attacker can send a flood of CONTINUATION frames, causing `h2` to process them indefinitely. This results in an increase in CPU usage.</p> <p>Tokio task budget helps prevent this from a complete denial-of-service, as the server can still respond to legitimate requests, albeit with increased latency.</p> <p>More details at &#34;https://seanmonstar.com/blog/hyper-http2-continuation-flood/.</p> <p>Patches available for 0.4.x and 0.3.x versions.</p> https://cve.radiocsirt.org/vuln/rustsec-2024-0332