{"action":"Upgrade h2 to 0.3.24 or later.","affected":[{"fixed":"0.3.24","introduced":"0"},{"fixed":"0.4.2","introduced":"0.4.0"}],"component":"h2","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.3.24","0.4.2"],"ghsa_id":"GHSA-8r5v-vm4m-4g25","id":"tcs_01M5KEVY0RD2P3M2QVEQDA5S2V","modified_at":"2026-09-10T03:50:09.232197976Z","published_at":"2024-01-19T15:24:56Z","references":["https://osv.dev/vulnerability/GHSA-8r5v-vm4m-4g25","https://github.com/hyperium/h2/pull/737","https://github.com/hyperium/h2/commit/59570e11ccddbec85f67a0c7aa353f7730c68854","https://github.com/hyperium/h2/commit/d919cd6fd8e0f4f5d1f6282fab0b38a1b4bf999c","https://github.com/hyperium/h2","https://rustsec.org/advisories/RUSTSEC-2024-0003.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-8r5v-vm4m-4g25","url":"https://osv.dev/vulnerability/GHSA-8r5v-vm4m-4g25"}],"summary":"Resource exhaustion vulnerability in h2 may lead to Denial of Service (DoS)"}