Ember HTTP/2 Missing SETTINGS_MAX_CONCURRENT_STREAMS Enforcement Leads to RDoS (CVE-2023-44487)
Security Advisory
CVE-2023-44487
High
http4s
Affected:
- io.http4s:http4s-ember-server <= 0.23.34
- org.http4s:http4s-ember-core <= 0.23.34
Fixed in:
- 0.23.35
Referenced CVEs:
CVE-2026-69203 · 7.5
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.