
The HTTP/2 Bomb: How a Zero-Byte Window Melts NGINX, Apache, and Envoy
Protect your web servers from the HTTP/2 Bomb vulnerability. Learn how a chained HPACK and Slowloris attack consumes 32GB of RAM and how to mitigate it.
Topic
Every article tagged Apache HTTPD memory exhaustion, newest first.

Protect your web servers from the HTTP/2 Bomb vulnerability. Learn how a chained HPACK and Slowloris attack consumes 32GB of RAM and how to mitigate it.
Keep reading

GitHub Package Firewall brings install-time npm policy gates, SLSA attestation checks, and version cooldowns to AI coding agents and CI/CD runners.

Node.js CVE-2026-111497 exposes Brotli decoding to potential RCE. Check affected versions, fetch() exposure, WAF limits, and the October 2026 patch checklist.

PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposes 70% of the web to unauthenticated PHP RCE and memory leaks. Check fixed versions, IOCs, and mitigations.