CLEANSTART-2026-TS50001

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TS50001.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-TS50001
Upstream
Published
2026-10-09T00:49:52Z
Modified
2026-10-09T01:00:20Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server
Details

Security vulnerability affects the apache2 package. An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server.

References

Affected packages

CleanStart / apache2

Package

Name
apache2
Purl
pkg:apk/cleanstart/apache2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.58-r0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TS50001.json"