getsentry / getsentry/sentry-cli
RUSTSEC-2026-0258: h2 unbounded empty DATA frames
- Lingua principale
- Rust
- Stelle
- 1k
- Fork
- 255
- Merge medio
- 5g 13h
- PR unite (30g)
- 8
Descrizione
> h2 unbounded empty DATA frames
| Details | |
| ------------------- | ---------------------------------------------- |
| Package | `h2` |
| Version | `0.4.15` |
| URL | [https://github.com/hyperium/hyper/security/advisories/GHSA-q83h-524g-xf6h](https://github.com/hyperium/hyper/security/advisories/GHSA-q83h-524g-xf6h) |
| Date | 2026-08-17 |
| Patched versions | `>=0.4.16` |
The h2 crate, used internally by hyper, had a flaw that would accept and queue empty DATA frames without limit.
If streams were not actively drained, this could lead to unbounded memory usage, or a panic if the length overflows.
Low severity.
Patched in v0.4.16.
See [advisory page](https://rustsec.org/advisories/RUSTSEC-2026-0258.html) for additional details.
Guida per i contributori
Apri la guida per i contributori
Valutazione
Questa issue non è ancora stata valutata.