Rust advisories / crate
Security history · h2 · data from Oct 24, 2026
Is h2 safe to use? Its security history
VerdictNo open advisories. 4 past vulnerabilities were fixed; use 0.4.16 or newer to be clear of all of them.
4advisories on record
4vulnerabilities
0unmaintained notices
0.4.16newest fixed version
Every advisory, newest first
- VulnerabilityRUSTSEC-2026-0258 · 2026-08-17h2 unbounded empty DATA frames
- VulnerabilityRUSTSEC-2024-0332 · 2024-04-03Degradation of service in h2 servers with CONTINUATION Flood
- VulnerabilityRUSTSEC-2024-0003 · 2024-01-17Resource exhaustion vulnerability in h2 may lead to Denial of Service (DoS)
- VulnerabilityRUSTSEC-2023-0034 · 2023-04-14Resource exhaustion vulnerability in h2 may lead to Denial of Service (DoS)
Check your version
Run cargo tree -i h2 to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.
Download trends, dependents and alternatives: h2 crate data.
RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.
Up next
Before you depend on ith2 crate dataReal downloads, dependents and alternatives.Read it next →Did this answer your question?