Products: 2
    Vulnerabilities: 9
    Known Exploited: 0
    1
    Critical Level Threats
    4
    High Level Threats
    2
    Medium Level Threats
    2
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-58055

    nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-Length

    Last Modified: Jun 29, 2026
    Published: Jun 28, 2026

    CVE-2026-27135

    nghttp2 Denial of service: Assertion failure due to the missing state validation

    Last Modified: May 13, 2026
    Published: Mar 18, 2026

    CVE-2024-28182

    Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage

    Last Modified: Nov 04, 2025
    Published: Apr 03, 2024

    CVE-2023-44487

    HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

    Last Modified: Aug 11, 2026
    Published: Oct 10, 2023

    CVE-2023-35945

    Envoy vulnerable to HTTP/2 memory leak in nghttp2 codec

    Last Modified: Nov 21, 2024
    Published: Jul 13, 2023
    Items Per Page
    Nghttp2 Vulnerabilities & Security CVEs | CVE-DB