CVE-2025-55163, known as the MadeYouReset vulnerability, is a logical flaw in the HTTP/2 protocol affecting io.netty:netty-codec-http2. It exploits malformed HTTP/2 control frames to bypass the max concurrent streams limit, causing resource exhaustion and denial of service. The attack triggers the server to reset streams prematurely, allowing an attacker to open an unbounded number of concurrent streams. This leads to CPU overload or memory exhaustion depending on the implementation. The vulnerability affects multiple versions of the Netty HTTP/2 codec and has a high severity rating with a CVSS score of 7.5. A patch is available in versions 4.2.4.Final, 4.1.124.Final, and 1.75.0.