nghttp2
- Total products in the ecosystem
- 1
- Total vulnerabilities (90 days)
- 0
Unreliable vulnerability data
en
Verify to analyze this security profile
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-58055nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-LengthCVE-2026-40170ngtcp2 has a qlog transport parameter serialization stack buffer overflowCVE-2026-27135nghttp2 Denial of service: Assertion failure due to the missing state validationCVE-2024-28182Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usageCVE-2023-44487CVE-2023-44487Details| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-58055nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-Length | Exploitation statusActively exploited | FixYes | Affected productnghttp2 | Published06/28/2026 | SeverityMedium |
CVE-2026-40170ngtcp2 has a qlog transport parameter serialization stack buffer overflow | Exploitation statusActively exploited | FixYes | Affected productngtcp2 | Published | |
CVE-2026-27135nghttp2 Denial of service: Assertion failure due to the missing state validation | Exploitation statusNot exploited | FixNo | Affected productnghttp2 | Published | |
CVE-2024-28182Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage | Exploitation statusNot exploited | FixNo | Affected productnghttp2 | Published | |
CVE-2023-44487CVE-2023-44487 | Exploitation statusKEV | FixNo | Affected productnghttp2 | Published10/10/2023 | |
CVE-2023-35945Envoy vulnerable to HTTP/2 memory leak in nghttp2 codec | Exploitation statusActively exploited | FixYes | Affected productenvoy | Published07/13/2023 | |
CVE-2020-11080Denial of service in nghttp2 | Exploitation statusNot exploited | FixNo | Affected productnghttp2 | Published06/03/2020 | |
CVE-2016-1544CVE-2016-1544 | Exploitation statusNot confirmed | FixNo | Affected productnghttp2 | Published02/06/2020 | |
CVE-2018-1000168CVE-2018-1000168 | Exploitation statusNot exploited | FixNo | Affected product- | Published05/08/2018 | SeverityHigh |
CVE-2015-8659CVE-2015-8659 | Exploitation statusNot confirmed | FixNo | Affected product- | Published01/12/2016 | SeverityUnknown |
10 Results | Page 1 of 1
| SeverityHigh |
| SeverityHigh |
| SeverityMedium |
| SeverityHigh |