{"id":"CVE-2022-31394","aliases":["AZL-13685","AZL-35218","AZL-61516","DEBIAN-CVE-2022-31394","EUVD-2022-52907","GHSA-x477-xp89-wc9r","JLSEC-2026-20","SUSE-SU-2023:1844-1","SUSE-SU-2023:2603-1","SUSE-SU-2023:2637-1","SUSE-SU-2023:3526-1","SUSE-SU-2024:0090-1","openSUSE-SU-2024:12727-1","openSUSE-SU-2024:12728-1","openSUSE-SU-2024:12757-1","openSUSE-SU-2024:12764-1","openSUSE-SU-2024:12807-1"],"status":"published","title":"Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method...","description":"Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01076,"percentile":0.65225,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-770"],"published":"2023-02-21T00:00:00Z","modified":"2026-11-03T06:02:32Z","fixes":[{"ecosystem":"Azure Linux:2","package":"rpm-ostree","fixed_in":["2022.1-4"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"rpm-ostree","fixed_in":["2022.1-7"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"rust","fixed_in":["hyper-0.14.25"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"rust-hyper","fixed_in":["0.14.19-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"rust-hyper","fixed_in":["0.14.19-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"rust-hyper","fixed_in":["0.14.19-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"hyper_jll","fixed_in":["0.14.19+0"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"gstreamer-plugins-rs","fixed_in":["0.8.2-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP4","package":"gstreamer-plugins-rs","fixed_in":["0.8.2-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"rustup","fixed_in":["1.25.2~0-2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"sccache","fixed_in":["0.4.0pre.7~0-2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"pijul","fixed_in":["1.0.0~beta.4-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"wasm-pack","fixed_in":["0.11.0~0-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"rpm-ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.1-4"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"rpm-ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.1-7"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.85.0"},{"fixed":"hyper-0.14.25"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"rust-hyper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.19-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"rust-hyper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.19-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"rust-hyper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14.19-1"}]}]},{"source":"osv","ecosystem":"Julia","package":"hyper_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.14.19+0"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"aws-nitro-enclaves-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2~git0.4ccc639-150400.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"aws-nitro-enclaves-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2~git0.4ccc639-150400.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"rustup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0~0-150400.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"rustup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0~0-150400.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"rustup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0~0-150400.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"rustup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0~0-150400.3.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"sccache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.1~18-150300.7.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"sccache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.1~18-150300.7.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"sccache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.1~18-150300.7.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"sccache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.1~18-150300.7.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"sccache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.1~18-150300.7.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"sccache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.1~18-150300.7.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"sccache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.1~18-150300.7.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"sccache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.2~3-150400.3.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"sccache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.2~3-150400.3.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"sccache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.2~3-150400.3.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"sccache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.2~3-150400.3.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"gstreamer-plugins-rs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP4","package":"gstreamer-plugins-rs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rustup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.2~0-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"sccache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0pre.7~0-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"pijul","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0~beta.4-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"wasm-pack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.0~0-1.1"}]}]}],"products":[{"vendor":"hyper","product":"hyper"}],"references":[{"url":"https://github.com/hyperium/hyper/issues/2826","tags":["x_transferred","Exploit","Issue Tracking","Patch","Vendor Advisory","report","web"]},{"url":"https://github.com/hyperium/hyper/pull/2828","tags":["x_transferred","Issue Tracking","Patch","fix","web"]},{"url":"https://github.com/hyperium/hyper/compare/v0.14.18...v0.14.19","tags":["x_transferred","Patch","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-31394","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-x477-xp89-wc9r"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31394.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-31394","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231844-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1196972","tags":["report"]},{"url":"https://bugzilla.suse.com/1208555","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31394","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232603-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1208552","tags":["report"]},{"url":"https://bugzilla.suse.com/1210345","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-26964","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232637-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1208553","tags":["report"]},{"url":"https://bugzilla.suse.com/1212407","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1521","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233526-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1181400","tags":["report"]},{"url":"https://bugzilla.suse.com/1194119","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-45710","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240090-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1208556","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-31394","description":"Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks.","status":"published","published":"2023-02-21T00:00:00Z","modified":"2025-03-17T18:32:29.213Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:34:35.279735Z"}],"euvd":[{"id":"EUVD-2022-52907","description":"Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks.","status":"published","published":"2023-02-21T00:00:00Z","modified":"2025-03-17T18:32:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T20:53:01.2656Z"}],"ghsa":[{"id":"GHSA-x477-xp89-wc9r","title":"Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method...","description":"Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks.","status":"published","published":"2023-02-21T15:30:23Z","modified":"2023-03-02T18:30:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:54:15.627441Z"}],"nvd":[{"id":"CVE-2022-31394","description":"Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks.","status":"published","published":"2023-02-21T14:15:13.363Z","modified":"2026-06-17T04:45:24.197Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:07:36.601381Z"}],"osv":[{"id":"AZL-13685","title":"CVE-2022-31394 affecting package rpm-ostree for versions less than 2022.1-4","description":"Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks.","status":"published","published":"2023-02-21T14:15:13Z","modified":"2026-04-21T04:22:56.707612Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"AZL-35218","title":"CVE-2022-31394 affecting package rpm-ostree for versions less than 2022.1-7","description":"Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks.","status":"published","published":"2023-02-21T14:15:13Z","modified":"2026-04-21T04:50:49.408807Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"AZL-61516","title":"CVE-2022-31394 affecting package rust for versions less than hyper-0.14.25","description":"Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks.","status":"published","published":"2023-02-21T14:15:13Z","modified":"2026-04-21T04:51:46.887432Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:07.805289Z"},{"id":"CVE-2022-31394","description":"Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks.","status":"published","published":"2023-02-21T00:00:00Z","modified":"2026-10-28T02:30:43.499279486Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:25.516981Z"},{"id":"JLSEC-2026-20","description":"Hyperium Hyper before 0.14.19 does not allow for customization of the `max_header_list_size` method in the H2 third-party software, allowing attackers to perform HTTP2 attacks.","status":"published","published":"2026-04-01T15:14:44.989Z","modified":"2026-07-25T18:24:04.936671795Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.159338Z"},{"id":"DEBIAN-CVE-2022-31394","description":"Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method in the H2 third-party software, allowing attackers to perform HTTP2 attacks.","status":"published","published":"2023-02-21T14:15:13.363Z","modified":"2026-11-03T06:02:32.488922975Z","updated_at":"2026-11-03T06:44:05.456691Z"},{"id":"openSUSE-SU-2024:12727-1","title":"rustup-1.25.2~0-2.1 on GA media","description":"These are all security issues fixed in the rustup-1.25.2~0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:04:44.825542Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"openSUSE-SU-2024:12728-1","title":"sccache-0.4.0pre.7~0-2.1 on GA media","description":"These are all security issues fixed in the sccache-0.4.0pre.7~0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:14:05.955963Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"openSUSE-SU-2024:12757-1","title":"aws-nitro-enclaves-binaryblobs-upstream-1.2.2~git0.4ccc639-1.1 on GA media","description":"These are all security issues fixed in the aws-nitro-enclaves-binaryblobs-upstream-1.2.2~git0.4ccc639-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:41:26.142931Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"openSUSE-SU-2024:12764-1","title":"pijul-1.0.0~beta.4-1.1 on GA media","description":"These are all security issues fixed in the pijul-1.0.0~beta.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:23:05.149283Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"openSUSE-SU-2024:12807-1","title":"wasm-pack-0.11.0~0-1.1 on GA media","description":"These are all security issues fixed in the wasm-pack-0.11.0~0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:18:34.979119Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2023:1844-1","title":"Security update for aws-nitro-enclaves-cli","description":"This update for aws-nitro-enclaves-cli fixes the following issues:\n\nUpdate aws-nitro-enclaves-cli to version 1.2.2~git0.4ccc639:\n  * CVE-2022-31394: Fixed DoS vulnerability in hyper crate (bsc#1208555).\n\nUpdate aws-nitro-enclaves-cli to version 1.2.0~git2.841ef94:\n  * CVE-2022-24713: Fixed ReDoS vulnerability in regex crate (bsc#1196972).\n","status":"published","published":"2023-04-14T10:13:49Z","modified":"2026-02-04T03:12:18.977406Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:2603-1","title":"Security update for rustup","description":"This update for rustup fixes the following issues:\n\n- CVE-2022-31394: Fixed possible HTTP2 attacks by specifying the HTTP/2 SETTINGS_MAX_HEADER_LIST_SIZE (bsc#1208552).\n- CVE-2023-26964: Fixed high memory and CPU usage when stream stacking occurs when H2 processes HTTP2 RST_STREAM frames (bsc#1210345).\n","status":"published","published":"2023-06-22T07:48:27Z","modified":"2026-02-04T03:47:07.033546Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:2637-1","title":"Security update for sccache","description":"This update for sccache fixes the following issues:\n\n- CVE-2023-1521: Fixed possible code injection via LD_PRELOAD to sccache server (bsc#1212407).\n- CVE-2022-31394: Fixed a denial-of-service vulnerability via header list size (bsc#1208553). \n","status":"published","published":"2023-06-26T13:06:42Z","modified":"2026-02-04T02:32:53.823148Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:3526-1","title":"Security update for sccache","description":"This update for sccache fixes the following issues:\n\n- Update to version 0.4.2.\n- CVE-2021-45710: Fixed a segmentation fault due to data race in tokio crate. (bsc#1194119)\n- CVE-2022-24713: Fixed a ReDoS issue due to vulnerable regex crate. (bsc#1196972)\n- CVE-2022-31394: Fixed a DoS issue due to the max header list size not settable. (bsc#1208553)\n- CVE-2023-1521: Fixed a local privilege escalation. (bsc#1212407)\n","status":"published","published":"2023-09-05T07:56:33Z","modified":"2026-02-04T04:06:52.862143Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2024:0090-1","title":"Security update for gstreamer-plugins-rs","description":"This update for gstreamer-plugins-rs fixes the following issues:\n\n- CVE-2022-31394: Fixed a potential denial of service in the HTTP/2\n  implementation (bsc#1208556).\n","status":"published","published":"2024-01-11T14:41:18Z","modified":"2026-02-04T04:08:01.262211Z","updated_at":"2026-11-02T15:53:53.865042Z"}]}}