Package · Debian

h2o

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.5

CVE-2025-8671 Public exploit

CVE-2025-8671

A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to denial-of-service (DoS). By opening stre…

varnish-software Fastly SUSE Linux Wind River Linux Debian Ubuntu Alpine crates.io

Aug 13, 2025
High 7.5

CVE-2023-44487 Exploited Public exploit EPSS 100%

HTTP/2 Stream Cancellation Attack

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

nodejs go dotnet7 trafficserver Debian Ubuntu Alpine Maven Go SwiftURL

Oct 10, 2023
KEV Oct 10, 2023