actix-http: Bump h2 to fix a resource exhaustion vulnerability (#3262)

Co-authored-by: Rob Ede <[email protected]>
actix · Jan 24, 2024 · 891ab08 · 891ab08
1 parent a7375b6
commit 891ab08
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/actix-http/Cargo.toml b/actix-http/Cargo.toml
@@ -89,7 +89,7 @@ tokio-util = { version = "0.7", features = ["io", "codec"] }
 tracing = { version = "0.1.30", default-features = false, features = ["log"] }
 
 # http2
-h2 = { version = "0.3.17", optional = true }
+h2 = { version = "0.3.24", optional = true }
 
 # websockets
 local-channel = { version = "0.1", optional = true }