Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Terraform 1.16.6 fixes CVE-2026-78669 (HTTP/2 resource exhaustion). Fine print: exploiting it needs a compromised provider/module registry: exposure depends on where you pull providers. Also fixed: init finds HCP workspaces with uppercase tag keys. Registry or mirror? https://t.co/5haSmfRi6G