CVE-2026-111103 - HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Bandit
CVE ID :CVE-2026-111103 Published : Oct. 26, 2026, 1:32 p.m. | 51 minutes ago Description :Improper Cleanup on Thrown Exception vulnerability in the HTTP/2 handler of mtrudel bandit allows an unauthenticated remote attacker to bypass per-connection resource limits via a single TCP write that...