CVE-2026-94084: Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a ...

Severity: Critical

CVSS Score: 9.4

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.