Skip to content
OpenAdvisories

Product · CRUX

Protocol::HTTP2

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-10725

    Protocol::HTTP2 versions before 1.13 for Perl is vulnerable to a HTTP/2 Bomb

    Protocol::HTTP2 versions before 1.13 for Perl is vulnerable to a HTTP/2 Bomb. Protocol::HTTP2's inbound HPACK path has no header-list size limit, so a small HTTP/2 request can expand into large server memory (the "HTTP/2 bomb"). The headers_decode method mate…

    CRUX Protocol::HTTP2 libprotocol-http2-perl perl-protocol-http2 Debian Ubuntu Alpine