CVE-2025-5115, known as the MadeYouReset vulnerability, is a denial of service flaw in the HTTP/2 protocol affecting the Eclipse Jetty http2-common library. It exploits a design issue where the server incorrectly counts active streams when streams are reset, allowing an attacker to exhaust server resources by repeatedly triggering stream resets via malformed HTTP/2 control frames. This leads to CPU or memory exhaustion, causing service disruption. The vulnerability affects multiple Jetty versions prior to fixed releases and has a CVSS score of 7.5 (high severity).