mitmproxy

New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification

A vulnerability in HTTP/3 stacks, identified by FoxIO, allows a remote attacker to crash web servers by sending a small batch of compressed HTTP headers that expands dramatically in memory, potentially leading to a denia…