crates.io/h2: unknown

h2 unbounded empty DATA frames

Action: Upgrade h2 to 0.4.16 or later.

cargo update -p h2 --precise 0.4.16

Affected

Fixed versions

Sources

• osv: RUSTSEC-2026-0258
• https://crates.io/crates/h2
• https://rustsec.org/advisories/RUSTSEC-2026-0258.html
• https://github.com/hyperium/h2/pull/935

published 2026-08-17T12:00:00Z · modified 2026-10-12T18:00:10.934581734Z · JSON