Skip to content

Commit

Permalink
Cargo: update h2 to v0.3.26 to fix HTTP/2 CONTINUATION flood
Browse files Browse the repository at this point in the history 
Update h2 to v0.3.26, to address HTTP/2 CONTINUATION flood issues.
Update related crates as well, reqwest to 0.11.26, hyper to 0.14.28,
which are only patchlevel updates.

See also https://rustsec.org/advisories/RUSTSEC-2024-0332.html,
https://nowotarski.info/http2-continuation-flood/,
https://seanmonstar.com/blog/hyper-http2-continuation-flood/.
  • Loading branch information
@dongsupark
dongsupark committed Apr 5, 2024
1 parent ca9c60b commit 5f98253
Showing 1 changed file with 47 additions and 29 deletions.
76 changes: 47 additions & 29 deletions Cargo.lock
View file

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

0 comments on commit 5f98253

Please sign in to comment.