{"action":"Upgrade praxis-proxy to 0.5.2 or later.","affected":[{"fixed":"0.5.2","introduced":"0"}],"component":"praxis-proxy","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.5.2"],"ghsa_id":"GHSA-cjcg-cxmh-9wcr","id":"tcs_01M5KEWY1XJ5G80WM5KCJ9F0Y5","modified_at":"2026-10-02T23:30:06.757437335Z","published_at":"2026-10-02T23:09:37Z","references":["https://osv.dev/vulnerability/GHSA-cjcg-cxmh-9wcr","https://github.com/praxis-proxy/praxis/security/advisories/GHSA-cjcg-cxmh-9wcr","https://github.com/praxis-proxy/praxis/commit/2bb7b29d6992fc2d8045628475912d734e6bee97","https://access.redhat.com/security/vulnerabilities/RHSB-2026-007","https://blog.calif.io/p/codex-discovered-a-hidden-http2-bomb","https://github.com/praxis-proxy/praxis","https://github.com/praxis-proxy/praxis/releases/tag/v0.5.2"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-cjcg-cxmh-9wcr","url":"https://osv.dev/vulnerability/GHSA-cjcg-cxmh-9wcr"}],"summary":"Praxis affected by HTTP/2 Bomb"}