{"action":"Upgrade h2 to 0.4.16 or later.","affected":[{"fixed":"0.4.16","introduced":"0.0.0-0"}],"component":"h2","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.4.16"],"ghsa_id":"GHSA-q83h-524g-xf6h","id":"tcs_01M5KFC2T39SQFXXTP74GKSY4E","modified_at":"2026-10-12T18:00:10.934581734Z","published_at":"2026-08-17T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2026-0258","https://crates.io/crates/h2","https://rustsec.org/advisories/RUSTSEC-2026-0258.html","https://github.com/hyperium/h2/pull/935"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2026-0258","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0258"}],"summary":"h2 unbounded empty DATA frames"}