CVE-2026-116078 - HTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Bandit
CVE ID :CVE-2026-116078 Published : Oct. 28, 2026, 1:26 p.m. | 58 minutes ago Description :Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader of mtrudel bandit allows an unauthenticated remote attacker to exhaust server memory via a request...