Rapid Reset vulnerability (CVE-2023-44487)

Rapid Reset, the zero-day vulnerability in the HTTP/2 protocol that was exploited, starting on August 2023, to launch the largest DDoS attack ever with 398 million requests per second.

(see CISA Alert and CVE-2023-44487 for details)