Debian Linux Security Advisory 4508-1 - Three vulnerabilities were discovered in the HTTP/2 code of the H2O HTTP server, which could result in denial of service.
76fb0e4122080bc139ebee645c30819fe3573ab5a085d5f2008858e042069625
Apple Security Advisory 2019-08-13-5 - SwiftNIO HTTP/2 1.5.0 is now available and addresses resource exhaustion issues.
0b94099b10b0449a3b6a14c1bf11b53441f6a8f8113c73216243fbb29067ffd8