HTTP/2 Bomb (CVE-2026-49975): the HPACK + flow-control DoS, and how to patch it June 4, 2026 · Dev.to Read full story at source