Debian/nghttp2: high 7.5
nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_sessio
Action: Upgrade nghttp2 to 1.64.0-1.1+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.64.0-1.1+deb13u1 | - |
Fixed versions
| 1.64.0-1.1+deb13u1 |
Sources
- osv: DEBIAN-CVE-2026-27135#Debian:13/nghttp2
- https://security-tracker.debian.org/tracker/CVE-2026-27135
published · modified · JSON