Threats tagged 'ghsa-9jxc-cwfw-gpg8'

A resource exhaustion vulnerability exists in ninenines cowlib HTTP/2 implementation due to lack of limits on the size of decoded header lists. An unauthenticated remote peer can exploit this by sending specially crafted HPACK-indexed header fields, causing excessive memory allocation and potential denial of service. This affects cowlib versions from 2.7.0 onward.