HTTP/2 MadeYouReset stream-reset coercion (CVE-2025-8671) on this connection

net.h2_madeyoureset  ·  convicts

networklayer
automationcategory
1evaders caught

What it catches

CVE-2025-8671 (MadeYouReset); malformed WINDOW_UPDATE/PRIORITY coerce server RST_STREAM with no client RST — evades the rapid-reset rung; spec violations no browser emits

Signals it reads

network.h2_madeyoureset

How it fires

present

Evaders it caught 1

Bypassed by 10

Frontier evaders that reach the detector uncaught (scored only suspicious, defeating every convicting tell) — this check is not one that stops them. The red-team frontier this detection still has to convict.

← all detections