N
Vendor security profile
nghttp2
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs4
Critical0
CISA KEV0
Public exploit1
Patch rate%75
Avg. CVSS6.4
12-month vulnerability rate
0
0
0
0
1
0
0
1
0
0
0
0
CVE KEV
CVE severity distribution
4toplam CVE
High2 (50%)
Medium2 (50%)
Patch and exploitation view
%75
Verified patch
%0
CISA KEV
%25
Public exploit
3Patch available
0Partial
0Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
5.4
CVE-2026-58055
Vulnerability in Nghttp2
N
Patch verifiedEPSS %0
7.5
CVE-2026-27135
nghttp2 Denial of service: Assertion failure due to the missing state validation
N
Patch verifiedEPSS %1
5.3
CVE-2024-28182
Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage
N
Patch verified
7.5
CVE-2023-35945
Envoy vulnerable to HTTP/2 memory leak in nghttp2 codec
E
Patch status unknownEPSS %1