PT-2026-29959 · Julia · Openresty Jll+1

Publicado 2026-03-23 · Atualizado 2026-03-23

OSV

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

Exploit

Identificadores relacionados

JLSEC-2026-3

Produtos afetados

Openresty Jll

Nghttp2 Jll

Referências · 169

• 🔥 https://github.com/bcdannyboy/CVE-2023-44487 · Exploit
• 🔥 https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487 · Exploit
• https://github.com/kubernetes/kubernetes/pull/121120 · Nota
• https://github.com/golang/go/issues/63417 · Nota
• https://github.com/nodejs/node/pull/50121 · Nota
• https://github.com/caddyserver/caddy/releases/tag/v2.7.5 · Nota
• https://github.com/caddyserver/caddy/issues/5877 · Nota
• https://github.com/etcd-io/etcd/issues/16740 · Nota
• https://github.com/grpc/grpc/releases/tag/v1.59.2 · Nota
• https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61 · Nota
• https://github.com/Kong/kong/discussions/11741 · Nota
• https://github.com/envoyproxy/envoy/pull/30055 · Nota
• https://github.com/grpc/grpc-go/pull/6703 · Nota
• https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73 · Nota
• https://github.com/apache/apisix/issues/10320 · Nota