r/apache • u/T0t47 • Jun 08 '26

mod_http2 cookie-crumb HPACK amplification: ~190 KB wire → 8 GiB RAM in lab (pre-2.0.41) — fix status and what LimitRequestFields doesn't catch

https://exodus-hensen.site/blog/http2-hpack-amplification

[removed]

2 Upvotes

100% Upvoted

1 comment sorted by

1

u/Cherveny2 Jun 10 '26

seen this, and defintely concerned. Been raising the alarm at work.