Alpine/nghttp2: high 7.5
nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_sessio
Action: Upgrade nghttp2 to 1.68.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.68.1 | - |
Fixed versions
| 1.68.1 |
Sources
- osv: ALPINE-CVE-2026-27135#Alpine:v3.22/nghttp2
- https://security.alpinelinux.org/vuln/CVE-2026-27135
published · modified · JSON