---
id: 8881
title: "Codex Discovered a Hidden HTTP/2 Bomb"
source_domain: calif.io
source_url: "https://calif.io/research/http2-bomb"
published_at: "2026-06-02T00:00:00Z"
tags: ["vulnerability-research", "codex", "http2", "ai-agent", "dos", "madbugs"]
phying_url: "https://phying.com/item/8881"
lang: en
---

# Codex Discovered a Hidden HTTP/2 Bomb

## Summary

# Codex Discovered a Hidden HTTP/2 Bomb 14 years ago, I helped break HTTP header compression, then was asked to review the fix, which became part of HTTP/2. Life has come full circle: today we're...

## Intelligence Metadata

- **Sources:** calif.io
- **Published:** 2026-06-02T00:00:00Z
- **Original:** https://calif.io/research/http2-bomb
- **Phying News:** https://phying.com/item/8881