CLEANSTART-2026-PH23926: HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently

Q: What is the practical impact of successful exploitation?

Affected HTTP/2 servers could crash when their HPACK encoder is modified concurrently. This creates a denial-of-service condition for the affected service.

Q: Is a fixed version or workaround available in the provided advisory data?

No fixed version, configuration workaround, or mitigation is provided in the available data. The package should be tracked against the referenced advisory sources for remediation details.

Q: How can I determine whether my deployment may be affected?

Review whether your deployment uses the cleanstart/rabbitmq-cluster-operator package and exposes or operates HTTP/2 server functionality. The provided data does not identify affected version ranges or specific configurations.

Published Nov 3, 2026

Updated

Security vulnerability affects the rabbitmq-cluster-operator package. HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently.

Affected Software

1 affected componentFixes available

cleanstart/rabbitmq-cluster-operator<2.23.2-r1

2.23.2-r1

Event History

Nov 3, 2026

Advisory Published

via OSV·12:36 AM

Data Sourced

via OSV·12:36 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-97032

Frequently Asked Questions

What is the practical impact of successful exploitation?

Affected HTTP/2 servers could crash when their HPACK encoder is modified concurrently. This creates a denial-of-service condition for the affected service.

Is a fixed version or workaround available in the provided advisory data?

No fixed version, configuration workaround, or mitigation is provided in the available data. The package should be tracked against the referenced advisory sources for remediation details.

How can I determine whether my deployment may be affected?

Review whether your deployment uses the cleanstart/rabbitmq-cluster-operator package and exposes or operates HTTP/2 server functionality. The provided data does not identify affected version ranges or specific configurations.

CLEANSTART-2026-PH23926: HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What is the practical impact of successful exploitation?

Is a fixed version or workaround available in the provided advisory data?

How can I determine whether my deployment may be affected?

Company

Resources

Contact

Frequently Asked Questions

What is the practical impact of successful exploitation?

Is a fixed version or workaround available in the provided advisory data?

How can I determine whether my deployment may be affected?