The new features/behaviors in the new protocol inherently create new classes of vulnerabilities. That above link relates to an issue with RST_STREAM frames. You can't have issues with frames if you lack frames.

It's quite possible the old issues are worse than the new ones, but it's not obvious that's the case.