Skip to content
Nnghttp2
Products
| Product | CVEs | Exploited | Latest |
|---|
| nghttp2 | 4 | – | Jun 28, 2026 |
Exploited and recent CVEs
-
CVE-2026-58055
Medium 5.4
nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-Length
0.3%
-
CVE-2026-27135
High 7.5
nghttp2 Denial of service: Assertion failure due to the missing state validation
0.8%
-
CVE-2024-28182
Medium 5.3
Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage
82.0%
-
CVE-2020-11080
Low 3.7
Denial of service in nghttp2
5.3%