Debian/httpcomponents-core5: high 7.5
Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core (5.4.2 and earlier, 5.5-beta1 and earlier) allows an remote attacker to cause a denial of
Action: Upgrade httpcomponents-core5 to 5.4.3-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.4.3-1 | - |
Fixed versions
| 5.4.3-1 |
Sources
- osv: DEBIAN-CVE-2026-54428#Debian:14/httpcomponents-core5
- https://security-tracker.debian.org/tracker/CVE-2026-54428
published · modified · JSON