5.4
Moyenne
CVE-2026-58055 nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header…
Description
nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header and body onto reusable keep-alive backend connections, re-adding the Upgrade and Connection headers while passing Content-Length verbatim. A backend that resolves the resulting ambiguous message in the attacker's favor enables HTTP request/response smuggling and cross-client response-queue poisoning.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| nghttp2 1.69 | premières → 1.69.0 | Pas de correctif indiqué |
Autres CVE de nghttp2
Les 5 CVE de nghttp2 →
CVE-2026-27135
nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C
7.5
Élevée
CVE-2024-28182
nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C
5.3
Moyenne
CVE-2020-11080
In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload causes denial of service
3.7
Faible
CVE-2016-1544
nghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion)
Non notée