56,966 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a08219-b863-7331-bedd-2f9e7099bc42

HTTP Bomb (CVE-2026-47774): The Critical Envoy HTTP/2 Flaw Explained

Tetrate Blog · published 8 June 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at tetrate.io Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 11
Words captured: 1,117

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

Codex Discovered a Hidden HTTP/2 Bomb Read at the source ↗

https://github.com/envoyproxy/envoy/security/advisories/GHSA-22m2-hvr2-xqc8

github.com

https://github.com/envoyproxy/envoy/releases

github.com

https://www.theregister.com/security/2026/06/04/openais-codex-chains-decade-old-dos-techniques-into-http/2-bomb/5251377

theregister.com

https://www.rfc-editor.org/rfc/rfc7541

rfc-editor.org

https://nvd.nist.gov/vuln/detail/CVE-2016-6581

nvd.nist.gov

https://www.shodan.io/search?query=ssl.alpn%3A%22h2%22+product%3Anginx%2CApache%2CIIS%2CEnvoy%2CPingora

shodan.io

Customize EnvoyProxy Read at the source ↗

gateway.envoyproxy.io

https://tetrate.atlassian.net/servicedesk/customer/portals

tetrate.atlassian.net

https://tetrate.io/press/key-contributors-of-envoy-and-istio-projects-launch-tetrate-with-12-5m-in-funding-to-create-enterprise-grade-service-mesh

tetrate.io

https://aigateway.envoyproxy.io

aigateway.envoyproxy.io