GitHub
Double-free in Apache httpd mod_http2 stream cleanup leading to pre-auth RCE.
Snapshot: April 2026