<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: h2o</title><description>Every new CVE for h2o.</description><link>https://agentprime.io/</link><item><title>CVE-2026-55367: h2o: heap exhaustion using capsules</title><link>https://agentprime.io/advisories/CVE-2026-55367/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-55367/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Nov 2026 21:39:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-55368: h2o: buffer overflow when using the %{error}x log directive</title><link>https://agentprime.io/advisories/CVE-2026-55368/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-55368/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Nov 2026 21:38:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-54340: h2o has HTTP/2 state amplification</title><link>https://agentprime.io/advisories/CVE-2026-54340/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-54340/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Jul 2026 23:29:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-44453: h2o is vulnerable to musl libc stack overflow</title><link>https://agentprime.io/advisories/CVE-2026-44453/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-44453/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Jul 2026 23:04:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-44452: h2o is vulnerable to heap overrun</title><link>https://agentprime.io/advisories/CVE-2026-44452/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-44452/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Jul 2026 22:54:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-55213: h2o: musl libc stack overflow (QPACK)</title><link>https://agentprime.io/advisories/CVE-2026-55213/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-55213/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Jul 2026 20:49:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-45403: H2O assertion failure when HTTP/3 requests are cancelled</title><link>https://agentprime.io/advisories/CVE-2024-45403/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-45403/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 11 Oct 2024 14:28:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-45397: H2O alllows bypassing address-based access control with 0-RTT</title><link>https://agentprime.io/advisories/CVE-2024-45397/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-45397/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 11 Oct 2024 14:24:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-25622: H2O ignores headers configuration directives</title><link>https://agentprime.io/advisories/CVE-2024-25622/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-25622/</guid><description>CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 11 Oct 2024 14:20:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-50247: h2o QUIC state exhaustion DoS</title><link>https://agentprime.io/advisories/CVE-2023-50247/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-50247/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 Dec 2023 19:56:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-41337: h2o vulnerable to TLS session resumption misdirection</title><link>https://agentprime.io/advisories/CVE-2023-41337/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-41337/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 Dec 2023 19:42:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-30847: H2O vulnerable to read from uninitialized pointer in the reverse proxy handler</title><link>https://agentprime.io/advisories/CVE-2023-30847/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-30847/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Apr 2023 14:08:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-43848: Unititialized memory access in h2o</title><link>https://agentprime.io/advisories/CVE-2021-43848/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-43848/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 01 Feb 2022 12:13:56 GMT</pubDate><category>CVE</category></item></channel></rss>