Version 2.16.22 hardens Abyss Web Server against HTTP/2 BOMB attacks

June 19, 2026

Aprelium announces the immediate availability of new releases of both editions of Abyss Web Server for Windows, macOS, and Linux.

It is available in two editions:

  • Abyss Web Server X1 version 2.16.22: Free personal edition. It isn't a trial version or a demo. It is a fully usable personal web server with no limitations, no nag screens, no spyware, and no advertisements.
  • Abyss Web Server X2 version 2.16.22: Professional commercial edition. It is a professional-grade web server which comes with one year of free upgrades and one year of priority technical support.

The new version includes changes aiming at improving the defenses of the software against potential HTTP/2 BOMB attacks.

Users of previous versions should upgrade as soon as possible to this new release.

New Features

The new version is a maintenance release with the following changes:

  • Hardened Abyss Web Server against the HTTP/2 BOMB attack vulnerability by enforcing limits on request headers length.
  • Improved HTTP/2 download speed in for large static files.
  • Fixed regression in reverse-proxy when establishing WebSocket connections.
  • Updated the SSL/TLS engine.

A detailed changelog is also available.

Download / Upgrade

For Abyss Web Server X1 Users

Visit Downloads to get the new version of Abyss Web Server. Installation and upgrading instructions are provided on the download page.

For Abyss Web Server X2 Users

Open Abyss Web Server's console, select Help & Support, and click on Check for Updates.