| nghttp2-libs |
CVE-2026-58055 |
MEDIUM |
1.69.0-r0 |
1.70.0-r0 |
https://access.redhat.com/errata/RHSA-2026:54650
https://access.redhat.com/errata/RHSA-2026:54662
https://access.redhat.com/security/cve/CVE-2026-58055
https://bugzilla.redhat.com/2493954
https://bugzilla.redhat.com/show_bug.cgi?id=2493954
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-58055
https://errata.almalinux.org/9/ALSA-2026-54662.html
https://errata.rockylinux.org/RLSA-2026:54650
https://github.com/advisories/GHSA-xrr7-82jr-v58x
https://github.com/bikini/exploitarium/tree/main/nghttp2-nghttpx-upgrade-queue-poison-poc
https://github.com/nghttp2/nghttp2/commit/ab28105c4a0197da24f8bfc414bc116055249e1e
https://linux.oracle.com/cve/CVE-2026-58055.html
https://linux.oracle.com/errata/ELSA-2026-55804.html
https://nvd.nist.gov/vuln/detail/CVE-2026-58055
https://ubuntu.com/security/notices/USN-8495-1
https://www.cve.org/CVERecord?id=CVE-2026-58055
https://www.vulncheck.com/advisories/nghttp2-nghttpx-http-request-response-smuggling-via-upgrade-request-with-content-length
|