A reported “HTTP/2 Bomb” issue puts availability back in the spotlight, showing how default HTTP/2 handling can become a pressure point for major web servers and proxies.
A newly disclosed HTTP/2 issue may enable remote denial-of-service conditions against nginx, Apache httpd, Microsoft IIS, Envoy, and Cloudflare Pingora.