Skip to content

Search

ESC
← All tags
// Tag

Posts tagged “cve”

2 posts

Related topics
security http2 dos web-servers ai nextjs ssrf websocket

Posts

HTTP/2 Bomb banner: one connection firing thousands of tiny frames into a server whose memory overflows
22 min

HTTP/2 Bomb: Remote Memory-Exhaustion DoS (CVE-2026-49975)

A single HTTP/2 connection from a home laptop can pin tens of gigabytes of server RAM in seconds. How the AI-discovered HTTP/2 Bomb works and how to defend.

Read
security http2 cve dos web-servers ai
CVE-2026-44578 banner: Next.js WebSocket SSRF security advisory
26 min

CVE-2026-44578: Next.js WebSocket SSRF

High-severity (CVSS 8.6) SSRF in the Next.js WebSocket upgrade handler lets unauthenticated attackers proxy GETs to internal services on port 80.

Read
security nextjs cve ssrf websocket