Launchpad.net

CVE 2022-41723

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.

See the CVE page on Mitre.org for more details.