New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification
FoxIO disclosed QPACK flaws in seven HTTP/3 stacks that can cause denial of service through header expansion, with three stacks still unpatched.
More info