crates.io/h2: medium
Resource exhaustion vulnerability in h2 may lead to Denial of Service (DoS)
Action: Upgrade h2 to 0.3.24 or later.
cargo update -p h2 --precise 0.3.24cargo update -p h2 --precise 0.4.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.24 | - |
| 0.4.0 | 0.4.2 | - |
Fixed versions
| 0.3.24 | 0.4.2 |
Sources
- osv: GHSA-8r5v-vm4m-4g25
- https://github.com/hyperium/h2/pull/737
- https://github.com/hyperium/h2/commit/59570e11ccddbec85f67a0c7aa353f7730c68854
- https://github.com/hyperium/h2/commit/d919cd6fd8e0f4f5d1f6282fab0b38a1b4bf999c
- https://github.com/hyperium/h2
- https://rustsec.org/advisories/RUSTSEC-2024-0003.html
published · modified · JSON