Alpine/apache2: high 8.8

Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.

Action: Upgrade apache2 to 2.4.67-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2026-23918#Alpine:v3.23/apache2
• https://security.alpinelinux.org/vuln/CVE-2026-23918

published 2026-05-04T15:16:03.583Z · modified 2026-10-01T02:17:49.212548229Z · JSON