crates.io/praxis-proxy: high 7.5
Praxis affected by HTTP/2 Bomb
Action: Upgrade praxis-proxy to 0.5.2 or later.
cargo update -p praxis-proxy --precise 0.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.2 | - |
Fixed versions
| 0.5.2 |
Sources
- osv: GHSA-cjcg-cxmh-9wcr
- https://github.com/praxis-proxy/praxis/security/advisories/GHSA-cjcg-cxmh-9wcr
- https://github.com/praxis-proxy/praxis/commit/2bb7b29d6992fc2d8045628475912d734e6bee97
- https://access.redhat.com/security/vulnerabilities/RHSB-2026-007
- https://blog.calif.io/p/codex-discovered-a-hidden-http2-bomb
- https://github.com/praxis-proxy/praxis
- https://github.com/praxis-proxy/praxis/releases/tag/v0.5.2
published · modified · JSON