 unbounded memory growth (which can lead to out of memory conditions).</li><li>HTTP/2 flood using SETTINGS frames and queuing of SETTINGS ACK frames that results in unbounded memory growth (which can lead to out of memory conditions).</li><li>HTTP/2 flood using frames with an empty payload that results in excessive CPU usage and starvation of other clients.</li></ul><p>Those vulnerabilities were reported externally and affect multiple proxy implementations.
See <a href=https://github.com/Netflix/security-bu