HTTP/2 Bomb (CVE-2026-49975): the HPACK + flow-control DoS, and how to patch it

· Dev.to