← Packages
nghttp2
Implementation of Hypertext Transfer Protocol version 2 in C
- Current
- 1.69.0
- Candidate
- 1.71.0
- License
- MIT
Advisory · 1
Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.
- Summary
- nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-LengthOSV
- Fixed events
- ab28105c4a0197da24f8bfc414bc116055249e1eOSV
- EPSS model date
- 2026-11-10FIRST
- EPSS probability
- 0.253%FIRST
- Aliases
- —OSV
- KEV
- NoCISA
- CVSS_V4
- CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:L/SA:NOSV
Description
This is an implementation of Hypertext Transfer Protocol version 2. The framing layer of HTTP/2 is implemented as a form of reusable C library. On top of that, we have implemented HTTP/2 client, server and proxy. We have also developed load test and benchmarking tool for HTTP/2. HPACK encoder and decoder are available as public API.
Changelog
PR · 2
Checks
| Monitor | Observation | Last checked |
|---|---|---|
Checked | ||
Checked | ||
Checked | ||
Checked | ||
Not configured No reliable monitor identity/configuration. | — | |
Not configured No reliable monitor identity/configuration. | — | |
Not configured No reliable monitor identity/configuration. | — | |
Checked Repository query; subpackage and local-patch applicability are not evaluated. | Last attempted | |
Not configured No reliable monitor identity/configuration. | — |