CVE-2022-41723 affects multiple packages. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests. See references for individual vulnerability details.