Netflix has discovered several resource exhaustion vectors affecting a variety of third-party HTTP/2 implementations. These attack vectors can be used to launch DoS attacks against servers that support HTTP/2 communication.
More information here:
I think it'd would be valuable to check if this implementation is affected by this vulnerabilities.