Sending an HTTP request/response body with greater than 2^31 bytes triggers an infinite loop in proxygen::coro::HTTPQuicCoroSessio

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams q

A packet of death scenario is possible in mvfst via a specially crafted message during a QUIC session, which causes a crash via a

A use-after-free is possible due to an error in lifetime management in the request adaptor when a malicious client invokes request

In the course of decompressing HPACK inside the HTTP2 protocol, an unexpected sequence of header table resize operations can place

An out of bounds write is possible via a specially crafted packet in certain configurations of Proxygen due to improper handling o

An issue in the Proxygen handling of HTTP2 parsing of headers/trailers can lead to a denial-of-service attack. This affects Proxyg

A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 priority settings (specifically a circular dependenc

Proxygen fails to validate that a secondary auth manager is set before dereferencing it. That can cause a denial of service issue

Facebook Proxygen before 2015-11-09 mismanages HTTPMessage.request state, which allows remote attackers to conduct hijacking attac

The SPDY/2 codec in Facebook Proxygen before 2015-11-09 truncates a certain field to two bytes, which allows hijacking and injecti

The SPDY/2 codec in Facebook Proxygen before 2015-11-09 allows remote attackers to conduct hijacking attacks and bypass ACL checks