Eric Meadows-Jönsson

Unauthenticated denial-of-service via unbounded HPACK integer decoding in hpax

HTTP response smuggling in Mint HTTP/1 client via lenient Content-Length parsing

HTTP/2 CONTINUATION flood in Mint client via unbounded header-block accumulation

Unbounded conn.streams growth in Mint HTTP/2 client via unenforced PUSH_PROMISE concurrency

CRLF injection in HTTP/1 request line via unvalidated method in Mint