{"cves":["CVE-2026-49975"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[2.0.26-6.1]\n- Resolves: RHEL-182417 - mod_http2: HTTP/2: Remote Denial of Service via\n  compression bomb and Slowloris-style attack (CVE-2026-49975)\n\n[2.0.26-6]\n- Resolves: RHEL-166293 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory\n  Increase (CVE-2025-53020)","id":"ELSA-2026-25057","ovalId":"oval:com.oracle.elsa:def:202625057","source":"oracle_linux","title":"ELSA-2026-25057:  mod_http2 security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-25057.html"}