Advisories · Technology
nghttp2.
Every CVE that names nghttp2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.3 Medium
nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-Length
- nghttp2
- HTTP request smuggling
- CVSS 7.5 High
nghttp2 Denial of service: Assertion failure due to the missing state validation
- nghttp2
- Denial of service
- CVSS 5.3 Medium
Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage
- nghttp2
- Denial of service
- CVSS 3.7 Low
Denial of service in nghttp2
- nghttp2
- CWE-707
-
nghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion).
- nghttp2