{"action":"Upgrade h2 to 0.3.24 or later.","affected":[{"fixed":"0.3.24","introduced":"0.0.0-0"},{"fixed":"0.4.2","introduced":"0.4.0-0"}],"component":"h2","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.3.24","0.4.2"],"ghsa_id":"GHSA-8r5v-vm4m-4g25","id":"tcs_01M5KF8Z8YF4AG9FT68NN0N6XR","modified_at":"2026-02-04T03:15:37.377206Z","published_at":"2024-01-17T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2024-0003","https://crates.io/crates/h2","https://rustsec.org/advisories/RUSTSEC-2024-0003.html","https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2024-0003","url":"https://osv.dev/vulnerability/RUSTSEC-2024-0003"}],"summary":"Resource exhaustion vulnerability in h2 may lead to Denial of Service (DoS)"}