About HTTP/2 Bomb Attack and HestiaCP

[fakruzaruret]

Does HestiaCP provides up to date web servers versions to handle http/2 bomb attack?

Codex Discovered a Hidden HTTP/2 Bomb

[sahsanu]

Take a look to this post:

Info Only: HTTP/2 Bomb (remote denial-of-service)

@nu01 Thanks for sharing. I just wanted to let you know that Hestia is not affected. The main Nginx instance is running version 1.30.2, and Apache2 does not have the HTTP/2 module enabled. The Nginx instance managing the Hestia Control Panel is also running Nginx 1.30.2, so it is not affected either.