AIKIDO-2026-10423

TL;DR

Affected versions of this package may fail with an assertion and crash when processing HTTP/2 traffic if session termination is triggered but the library continues reading subsequent malformed frames due to missing internal state validation. An attacker able to send specially crafted frames could exploit this by first inducing a connection-termination path through enabled extension handling such as ALTSVC, PRIORITY_UPDATE, or user-defined extension frames, then immediately sending a malformed frame that triggers FRAME_SIZE_ERROR, resulting in a denial of service through process termination.