Reality update: security-bulletins/2019-002.md at master · Netflix/security-bulletins · GitHub … :
“Workarounds and Fixes In most cases, an immediate workaround is to disable HTTP/2 support. However, this may cause performance degradation, and it might not be possible in all cases. To obtain software fixes, please contact your software vendor. More information can also be found in the CERT/CC vulnerability note.“