Record · corpus.blog/posts/01a0e34a-3ee3-7326-a4a8-2e9ded11218b

Codex Discovered a Hidden HTTP/2 Bomb

blog.calif.io · published 2 June 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.calif.io Wayback capture

3blogs citing

First cited: 8 Jun 2026
Most recent: 26 Jun 2026
Rank this month: not ranked
Links from this post: 17
Words captured: 1,490

Cited by

Blog

In the post

Date

Intigriti

Intigriti Bug Bytes #237 - June 2026 🚀 Read at the source ↗

26 Jun 2026

OpenAI

Patch the Planet: a Daybreak initiative to support open source maintainers Read at the source ↗

22 Jun 2026

Tetrate Blog

HTTP Bomb (CVE-2026-47774): The Critical Envoy HTTP/2 Flaw Explained Read at the source ↗

8 Jun 2026

Links from this post

Link

Host

https://www.shodan.io/search?query=ssl.alpn%3A%22h2%22+product%3Anginx%2CApache%2CIIS%2CEnvoy%2CPingora

shodan.io

https://substackcdn.com/image/fetch/$s_!b5uX!,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F5ca91bca-3d08-428c-aed2-64a4b18bdd63_1920x1080.gif

substackcdn.com

https://seclab.stanford.edu/RealWorldAIsec/

seclab.stanford.edu

https://www.rfc-editor.org/rfc/rfc7541

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc9113

rfc-editor.org

https://nvd.nist.gov/vuln/detail/CVE-2016-6581

nvd.nist.gov

https://galbarnahum.com/posts/apache-httpd-cve-2025-53020

galbarnahum.com

https://eissing.org/icing/posts/hpack-bombing-apache/

eissing.org

https://www.cve.org/CVERecord?id=CVE-2016-8740

cve.org

https://www.cve.org/CVERecord?id=CVE-2016-1546

cve.org

https://github.com/califio/publications/tree/main/MADBugs/http2-bomb

github.com

https://github.com/nginx/nginx/commit/365694160a85229a7cb006738de9260d49ff5fa2

github.com

https://github.com/apache/httpd/commit/47d3100b252dc6668a9e46ae885242be9eeca9cd

github.com

https://github.com/envoyproxy/envoy/security/advisories/GHSA-22m2-hvr2-xqc8

github.com

https://github.com/icing/mod_h2/releases

github.com

https://datatracker.ietf.org/doc/html/rfc7541

datatracker.ietf.org

https://en.wikipedia.org/wiki/CRIME

en.wikipedia.org