{"action":"Upgrade h2 to 0.3.26 or later.","affected":[{"fixed":"0.3.26","introduced":"0.0.0-0"},{"fixed":"0.4.4","introduced":"0.4.0-0"}],"component":"h2","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.3.26","0.4.4"],"ghsa_id":"GHSA-q6cp-qfwq-4gcv","id":"tcs_01M5KF938G24EZJV83FQDNK8VM","modified_at":"2024-04-11T16:41:43.668809Z","published_at":"2024-04-03T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2024-0332","https://crates.io/crates/h2","https://rustsec.org/advisories/RUSTSEC-2024-0332.html","https://seanmonstar.com/blog/hyper-http2-continuation-flood/"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2024-0332","url":"https://osv.dev/vulnerability/RUSTSEC-2024-0332"}],"summary":"Degradation of service in h2 servers with CONTINUATION Flood"}