getsentry / getsentry/sentry-cli
RUSTSEC-2026-0258: h2 unbounded empty DATA frames
- Lenguaje dominante
- Rust
- Estrellas
- 1k
- Forks
- 255
- Merge medio
- 5 d 13 h
- PR fusionados (30 d)
- 8
Descripción
> h2 unbounded empty DATA frames
| Details | |
| ------------------- | ---------------------------------------------- |
| Package | `h2` |
| Version | `0.4.15` |
| URL | [https://github.com/hyperium/hyper/security/advisories/GHSA-q83h-524g-xf6h](https://github.com/hyperium/hyper/security/advisories/GHSA-q83h-524g-xf6h) |
| Date | 2026-08-17 |
| Patched versions | `>=0.4.16` |
The h2 crate, used internally by hyper, had a flaw that would accept and queue empty DATA frames without limit.
If streams were not actively drained, this could lead to unbounded memory usage, or a panic if the length overflows.
Low severity.
Patched in v0.4.16.
See [advisory page](https://rustsec.org/advisories/RUSTSEC-2026-0258.html) for additional details.
Guía de contribución
Evaluación
Este issue todavía no se ha evaluado.