Advisories for Cargo/Praxis-Proxy package

2026

Praxis affected by HTTP/2 Bomb

Multiple denial-of-service vulnerabilities have been discovered in HTTP/2 server implementations. All have been rated with a severity impact of Important. The vulnerabilities target HPACK, the header compression scheme in HTTP/2, where a small request can trigger large memory allocations on the server.