Skip to content
Threat Feed
Subscribe

Product

Http4s-Ember-Core

1 brief RSS
medium threat

http4s Ember Backend HTTP/2 HPACK Bomb Denial of Service

The http4s Ember backend is vulnerable to a denial of service attack via HPACK bomb due to improper header size accounting, allowing remote attackers to trigger Java heap memory exhaustion.

exploited http4s-ember-core