It's not always HTTP/2. But it's a pretty safe bet.
The vulnerability affects deployments utilizing HTTP/2 capabilities
The vulnerability affects deployments utilizing HTTP/2 capabilities