{"id":"CVE-2024-28182","aliases":["ALSA-2024:2778","ALSA-2024:2779","ALSA-2024:2780","ALSA-2024:2853","ALSA-2024:2910","ALSA-2024:3501","ALSA-2024:4252","AZL-38719","AZL-38728","AZL-38881","AZL-38995","AZL-39115","AZL-39148","AZL-39460","AZL-39520","AZL-42099","AZL-56113","BELL-CVE-2024-28182","CLSA-2025-1765381441","DEBIAN-CVE-2024-28182","DLA-3804-1","DLA-3898-1","EUVD-2024-25307","GHSA-x6x3-gv8h-m57q","JLSEC-2026-4","MGASA-2024-0135","OESA-2024-1389","RHSA-2024:2693","RHSA-2024:2778","RHSA-2024:2779","RHSA-2024:2780","RHSA-2024:2853","RHSA-2024:2910","RHSA-2024:2937","RHSA-2024:3501","RHSA-2024:3544","RHSA-2024:3665","RHSA-2024:3701","RHSA-2024:3763","RHSA-2024:3875","RHSA-2024:4252","RHSA-2024:4576","RHSA-2024:4721","RHSA-2024:4732","RHSA-2024:4824","RLSA-2024:2778","RLSA-2024:2779","RLSA-2024:2780","RLSA-2024:2853","RLSA-2024:2910","RLSA-2024:3501","RLSA-2024:4252","ROOT-OS-ALPINE-317-CVE-2024-28182","ROOT-OS-ALPINE-318-CVE-2024-28182","ROOT-OS-ALPINE-319-CVE-2024-28182","SUSE-SU-2024:1156-1","SUSE-SU-2024:1167-1","SUSE-SU-2024:1167-2","SUSE-SU-2025:20002-1","UBUNTU-CVE-2024-28182","USN-6754-1","USN-6754-2","openSUSE-SU-2024:13825-1"],"status":"published","title":"Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage","description":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync.  This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.81994,"percentile":0.99657,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-770"],"published":"2024-04-04T05:57:15.82413Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"libnghttp2","fixed_in":["1.43.0-5.el9_4.3"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libnghttp2-devel","fixed_in":["1.43.0-5.el9_4.3"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"nghttp2","fixed_in":["1.43.0-5.el9_4.3"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libnghttp2","fixed_in":["1.33.0-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libnghttp2-devel","fixed_in":["1.33.0-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"nghttp2","fixed_in":["1.33.0-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"rust","fixed_in":["1.75.0-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"cmake","fixed_in":["3.29.6-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"nodejs","fixed_in":["20.14.0-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"nghttp2","fixed_in":["1.61.0-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"cmake","fixed_in":["3.21.4-14"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"nodejs18","fixed_in":["18.20.3-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"nghttp2","fixed_in":["1.57.0-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"rust","fixed_in":["1.68.0-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"fluent-bit","fixed_in":["3.1.9-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"fluent-bit","fixed_in":["3.0.6-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"nghttp2","fixed_in":["1.51.0-r3"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"nghttp2","fixed_in":["1.61.0-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"nghttp2","fixed_in":["1.51.0-r3"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"nghttp2","fixed_in":["1.61.0-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libnghttp2","fixed_in":["1.43.0-5.el9_2.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libnghttp2-devel","fixed_in":["1.43.0-5.el9_2.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"nghttp2","fixed_in":["1.43.0-5.el9_2.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"nghttp2","fixed_in":["1.52.0-1+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nghttp2","fixed_in":["1.61.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nghttp2","fixed_in":["1.61.0-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"nghttp2","fixed_in":["1.36.0-2+deb10u3"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"nghttp2","fixed_in":["1.43.0-1+deb11u2"],"sources":["osv"]},{"ecosystem":"Julia","package":"nghttp2_jll","fixed_in":["1.61.0+0"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"nghttp2","fixed_in":["1.61.0-1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"nghttp2","fixed_in":["1.41.0-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"nghttp2","fixed_in":["1.41.0-6.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"nghttp2","fixed_in":["1.46.0-6.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"nghttp2","fixed_in":["1.46.0-6.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"nghttp2","fixed_in":["1.46.0-6.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"nghttp2","fixed_in":["1.46.0-6.oe2203sp3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libnghttp2","fixed_in":["0:1.43.0-5.el9_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libnghttp2-debuginfo","fixed_in":["0:1.43.0-5.el9_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"nghttp2","fixed_in":["0:1.43.0-5.el9_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"nghttp2-debuginfo","fixed_in":["0:1.43.0-5.el9_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"nghttp2-debugsource","fixed_in":["0:1.43.0-5.el9_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libnghttp2-debuginfo","fixed_in":["0:1.43.0-5.el9_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libnghttp2-devel","fixed_in":["0:1.43.0-5.el9_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nghttp2","fixed_in":["0:1.43.0-5.el9_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nghttp2-debuginfo","fixed_in":["0:1.43.0-5.el9_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nghttp2-debugsource","fixed_in":["0:1.43.0-5.el9_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"libnghttp2","fixed_in":["0:1.43.0-5.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"libnghttp2-debuginfo","fixed_in":["0:1.43.0-5.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"nghttp2","fixed_in":["0:1.43.0-5.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"nghttp2-debuginfo","fixed_in":["0:1.43.0-5.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"nghttp2-debugsource","fixed_in":["0:1.43.0-5.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"libnghttp2-debuginfo","fixed_in":["0:1.43.0-5.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"libnghttp2-devel","fixed_in":["0:1.43.0-5.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"nghttp2","fixed_in":["0:1.43.0-5.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"nghttp2-debuginfo","fixed_in":["0:1.43.0-5.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"nghttp2-debugsource","fixed_in":["0:1.43.0-5.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libnghttp2","fixed_in":["0:1.33.0-5.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libnghttp2-debuginfo","fixed_in":["0:1.33.0-5.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"nghttp2","fixed_in":["0:1.33.0-5.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"nghttp2-debuginfo","fixed_in":["0:1.33.0-5.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"nghttp2-debugsource","fixed_in":["0:1.33.0-5.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"libnghttp2-debuginfo","fixed_in":["0:1.33.0-5.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"libnghttp2-devel","fixed_in":["0:1.33.0-5.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"nghttp2","fixed_in":["0:1.33.0-5.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"nghttp2-debuginfo","fixed_in":["0:1.33.0-5.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"nghttp2-debugsource","fixed_in":["0:1.33.0-5.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libnghttp2","fixed_in":["0:1.33.0-4.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libnghttp2-debuginfo","fixed_in":["0:1.33.0-4.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"nghttp2","fixed_in":["0:1.33.0-4.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"nghttp2-debuginfo","fixed_in":["0:1.33.0-4.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"nghttp2-debugsource","fixed_in":["0:1.33.0-4.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libnghttp2","fixed_in":["0:1.33.0-4.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libnghttp2-debuginfo","fixed_in":["0:1.33.0-4.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"nghttp2","fixed_in":["0:1.33.0-4.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"nghttp2-debuginfo","fixed_in":["0:1.33.0-4.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"nghttp2-debugsource","fixed_in":["0:1.33.0-4.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libnghttp2","fixed_in":["0:1.33.0-4.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libnghttp2-debuginfo","fixed_in":["0:1.33.0-4.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"nghttp2","fixed_in":["0:1.33.0-4.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"nghttp2-debuginfo","fixed_in":["0:1.33.0-4.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"nghttp2-debugsource","fixed_in":["0:1.33.0-4.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"libnghttp2","fixed_in":["0:1.43.0-5.el9_0.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"libnghttp2-debuginfo","fixed_in":["0:1.43.0-5.el9_0.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"nghttp2","fixed_in":["0:1.43.0-5.el9_0.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"nghttp2-debuginfo","fixed_in":["0:1.43.0-5.el9_0.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"nghttp2-debugsource","fixed_in":["0:1.43.0-5.el9_0.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libnghttp2","fixed_in":["0:1.33.0-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libnghttp2-debuginfo","fixed_in":["0:1.33.0-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"nghttp2","fixed_in":["0:1.33.0-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"nghttp2-debuginfo","fixed_in":["0:1.33.0-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"nghttp2-debugsource","fixed_in":["0:1.33.0-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libnghttp2-debuginfo","fixed_in":["0:1.33.0-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libnghttp2-devel","fixed_in":["0:1.33.0-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"nghttp2","fixed_in":["0:1.33.0-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"nghttp2-debuginfo","fixed_in":["0:1.33.0-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"nghttp2-debugsource","fixed_in":["0:1.33.0-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libnghttp2","fixed_in":["0:1.33.0-3.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libnghttp2-debuginfo","fixed_in":["0:1.33.0-3.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"nghttp2","fixed_in":["0:1.33.0-3.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"nghttp2-debuginfo","fixed_in":["0:1.33.0-3.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"nghttp2-debugsource","fixed_in":["0:1.33.0-3.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libnghttp2","fixed_in":["0:1.33.0-4.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libnghttp2-debuginfo","fixed_in":["0:1.33.0-4.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"nghttp2","fixed_in":["0:1.33.0-4.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"nghttp2-debuginfo","fixed_in":["0:1.33.0-4.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"nghttp2-debugsource","fixed_in":["0:1.33.0-4.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"libnghttp2","fixed_in":["0:1.33.0-4.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"libnghttp2-debuginfo","fixed_in":["0:1.33.0-4.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"nghttp2","fixed_in":["0:1.33.0-4.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"nghttp2-debuginfo","fixed_in":["0:1.33.0-4.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"nghttp2-debugsource","fixed_in":["0:1.33.0-4.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"libnghttp2","fixed_in":["0:1.33.0-4.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"libnghttp2-debuginfo","fixed_in":["0:1.33.0-4.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"nghttp2","fixed_in":["0:1.33.0-4.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"nghttp2-debuginfo","fixed_in":["0:1.33.0-4.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"nghttp2-debugsource","fixed_in":["0:1.33.0-4.el8_4.2"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"nghttp2","fixed_in":["0:1.43.0-5.el9_4.3"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"nghttp2","fixed_in":["0:1.33.0-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.17","package":"nghttp2","fixed_in":["1.51.0-r20071","1.51.0-r20072","1.51.0-r20074","1.51.0-r20073","1.51.0-r20075"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.17","package":"rootio-nghttp2","fixed_in":["1.51.0-r20071","1.51.0-r20072","1.51.0-r20074","1.51.0-r20073","1.51.0-r20075"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.18","package":"rootio-nghttp2","fixed_in":["1.57.0-r00072"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.19","package":"rootio-nghttp2","fixed_in":["1.58.0-r00072"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"nghttp2","fixed_in":["1.39.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"nghttp2","fixed_in":["1.39.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"nghttp2","fixed_in":["1.39.2-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"nghttp2","fixed_in":["1.40.0-150200.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"nghttp2","fixed_in":["1.40.0-150200.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"nghttp2","fixed_in":["1.40.0-150200.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"nghttp2","fixed_in":["1.40.0-150200.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"nghttp2","fixed_in":["1.40.0-150200.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"nghttp2","fixed_in":["1.40.0-150200.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"nghttp2","fixed_in":["1.40.0-150200.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"nghttp2","fixed_in":["1.40.0-150200.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"nghttp2","fixed_in":["1.40.0-150200.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"nghttp2","fixed_in":["1.40.0-150200.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"nghttp2","fixed_in":["1.40.0-150200.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"nghttp2","fixed_in":["1.40.0-150200.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"nghttp2","fixed_in":["1.40.0-150200.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"nghttp2","fixed_in":["1.40.0-150200.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"nghttp2","fixed_in":["1.40.0-150200.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"nghttp2","fixed_in":["1.40.0-150200.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"nghttp2","fixed_in":["1.40.0-150200.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"nghttp2","fixed_in":["1.40.0-150200.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"nghttp2","fixed_in":["1.40.0-150200.17.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"nghttp2","fixed_in":["1.40.0-150200.17.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.4","package":"nghttp2","fixed_in":["1.40.0-150200.17.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"nghttp2","fixed_in":["1.40.0-150200.17.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"nghttp2-python","fixed_in":["1.40.0-150200.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"nghttp2","fixed_in":["1.52.0-5.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"nghttp2","fixed_in":["1.7.1-1ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"nghttp2","fixed_in":["1.30.0-1ubuntu1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"nghttp2","fixed_in":["1.40.0-1ubuntu0.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"nghttp2","fixed_in":["1.43.0-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"nghttp2","fixed_in":["1.59.0-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"nghttp2","fixed_in":["1.61.0-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.12.2-2.module_el8.9.0+3827+11b91f3e"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.12.2-2.module_el8.9.0+3827+11b91f3e"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.12.2-2.module_el8.9.0+3827+11b91f3e"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.12.2-2.module_el8.9.0+3827+11b91f3e"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-1.module_el8.9.0+3731+490e3ce5"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.06-4.module_el8.9.0+3684+11b9e959"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-packaging-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.06-4.module_el8.9.0+3684+11b9e959"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.5.0-1.20.12.2.2.module_el8.9.0+3827+11b91f3e"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-2.module_el9.4.0+99+a01f7676"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-2.module_el9.4.0+99+a01f7676"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-2.module_el9.4.0+99+a01f7676"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-2.module_el9.4.0+99+a01f7676"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-1.module_el9.2.0+36+853e48f5"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.06-4.module_el9.1.0+13+d9a595ea"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs-packaging-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.06-4.module_el9.1.0+13+d9a595ea"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.5.0-1.18.20.2.2.module_el9.4.0+99+a01f7676"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-1.module_el8.9.0+3828+c9fa9644"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-1.module_el8.9.0+3828+c9fa9644"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-1.module_el8.9.0+3828+c9fa9644"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-1.module_el8.9.0+3828+c9fa9644"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-1.module_el8.8.0+3613+1ed8c91d"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.06-4.module_el8.7.0+3343+ea2b7901"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nodejs-packaging-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.06-4.module_el8.7.0+3343+ea2b7901"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.5.0-1.18.20.2.1.module_el8.9.0+3828+c9fa9644"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.12.2-2.module_el9.4.0+100+71fc9528"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.12.2-2.module_el9.4.0+100+71fc9528"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.12.2-2.module_el9.4.0+100+71fc9528"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.12.2-2.module_el9.4.0+100+71fc9528"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-1.module_el9.3.0+47+c33bc288"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.06-4.module_el9.3.0+88+29afeaa2"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs-packaging-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.06-4.module_el9.3.0+88+29afeaa2"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.5.0-1.20.12.2.2.module_el9.4.0+100+71fc9528"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-8.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-8.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-8.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nodejs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-8.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.19.4-1.16.20.2.8.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libnghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.0-5.el9_4.3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libnghttp2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.0-5.el9_4.3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.0-5.el9_4.3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libnghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.33.0-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libnghttp2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.33.0-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.33.0-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.75.0-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"cmake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.29.6-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.14.0-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.61.0-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"cmake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.4-14"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"nodejs18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.20.3-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.57.0-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.68.0-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"fluent-bit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.9-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"fluent-bit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.6-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.51.0-r0"},{"fixed":"1.51.0-r3"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.52.0-r0"},{"fixed":"1.61.0-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.51.0-r0"},{"fixed":"1.51.0-r3"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.52.0-r0"},{"fixed":"1.61.0-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libnghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.0-5.el9_2.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libnghttp2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.0-5.el9_2.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.0-5.el9_2.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.52.0-1+deb12u2"}]}],"versions":["1.52.0-1","1.52.0-1+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.61.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.61.0-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.0-2+deb10u3"}]}],"versions":["1.36.0-2","1.36.0-2+deb10u1","1.36.0-2+deb10u2"]},{"source":"osv","ecosystem":"Debian:11","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.0-1+deb11u2"}]}],"versions":["1.43.0-1","1.43.0-1+deb11u1"]},{"source":"osv","ecosystem":"Julia","package":"nghttp2_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.61.0+0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.61.0-1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41.0-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41.0-6.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.46.0-6.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.46.0-6.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.46.0-6.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.46.0-6.oe2203sp3"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7.1-2.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7.1-2.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-10.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-10.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-10.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-10.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-10.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-10.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7.1-2.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7.1-2.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.19-37.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_http2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.19-37.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.49-6.redhat_1.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk-ap24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.49-6.redhat_1.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.49-6.redhat_1.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-10.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.24-6.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_md-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.24-6.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_proxy_cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.20-4.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_proxy_cluster-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.20-4.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.57-10.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-36.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_security-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-36.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-10.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.57-10.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-13.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-13.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-nghttp2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-13.el7jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7.1-2.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7.1-2.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-10.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-10.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-10.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-10.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-10.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-10.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-10.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7.1-2.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-libcurl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7.1-2.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.7.1-2.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.19-37.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_http2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.19-37.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_jk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.49-6.redhat_1.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_jk-ap24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.49-6.redhat_1.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_jk-ap24-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.49-6.redhat_1.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-10.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-10.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.24-6.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_md-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.24-6.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_proxy_cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.20-4.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_proxy_cluster-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.20-4.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.57-10.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_proxy_html-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.57-10.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-36.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_security-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-36.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-10.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_session-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.57-10.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.57-10.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.57-10.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-13.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-13.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-nghttp2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-13.el8jbcs"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.12.2-2.module+el8.9.0+21743+0b3f1be2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.12.2-2.module+el8.9.0+21743+0b3f1be2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.12.2-2.module+el8.9.0+21743+0b3f1be2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.12.2-2.module+el8.9.0+21743+0b3f1be2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.12.2-2.module+el8.9.0+21743+0b3f1be2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.12.2-2.module+el8.9.0+21743+0b3f1be2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.module+el8.9.0+20473+c4e3d824"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el8.9.0+19519+e25b965a"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-packaging-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el8.9.0+19519+e25b965a"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.5.0-1.20.12.2.2.module+el8.9.0+21743+0b3f1be2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-2.module+el9.4.0+21742+692df1ea"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-2.module+el9.4.0+21742+692df1ea"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-2.module+el9.4.0+21742+692df1ea"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-2.module+el9.4.0+21742+692df1ea"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-2.module+el9.4.0+21742+692df1ea"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-2.module+el9.4.0+21742+692df1ea"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.module+el9.3.0+19762+d716bf3b"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.1.0+15718+e52ec601"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-packaging-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.1.0+15718+e52ec601"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.5.0-1.18.20.2.2.module+el9.4.0+21742+692df1ea"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-1.module+el8.9.0+21767+537f34ee"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-1.module+el8.9.0+21767+537f34ee"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-1.module+el8.9.0+21767+537f34ee"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-1.module+el8.9.0+21767+537f34ee"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-1.module+el8.9.0+21767+537f34ee"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-1.module+el8.9.0+21767+537f34ee"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.module+el8.9.0+21190+5ebd2c33"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el8.9.0+21190+5ebd2c33"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nodejs-packaging-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el8.9.0+21190+5ebd2c33"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.5.0-1.18.20.2.1.module+el8.9.0+21767+537f34ee"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.12.2-2.module+el9.4.0+21731+46b5b8a7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.12.2-2.module+el9.4.0+21731+46b5b8a7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.12.2-2.module+el9.4.0+21731+46b5b8a7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.12.2-2.module+el9.4.0+21731+46b5b8a7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.12.2-2.module+el9.4.0+21731+46b5b8a7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.12.2-2.module+el9.4.0+21731+46b5b8a7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.module+el9.3.0.z+20478+84a9f781"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.3.0+19518+63aad52d"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-packaging-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.3.0+19518+63aad52d"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.5.0-1.20.12.2.2.module+el9.4.0+21731+46b5b8a7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-8.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-8.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-8.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-8.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-8.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-8.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"nodejs-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-8.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.19.4-1.16.20.2.8.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-5.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"nodejs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-5.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"nodejs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-5.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-5.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-5.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"nodejs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-5.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"nodejs-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-5.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.19.4-1.16.20.2.5.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libnghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libnghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"nghttp2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libnghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libnghttp2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"nghttp2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-2.module+el9.2.0+21812+f1e61652"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"nodejs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-2.module+el9.2.0+21812+f1e61652"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"nodejs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-2.module+el9.2.0+21812+f1e61652"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"nodejs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-2.module+el9.2.0+21812+f1e61652"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-2.module+el9.2.0+21812+f1e61652"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-2.module+el9.2.0+21812+f1e61652"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.module+el9.2.0.z+19753+58118bc0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.1.0+15718+e52ec601"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"nodejs-packaging-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.1.0+15718+e52ec601"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.5.0-1.18.20.2.2.module+el9.2.0+21812+f1e61652"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"libnghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"libnghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"nghttp2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"libnghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"libnghttp2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"nghttp2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libnghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-5.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libnghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-5.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-5.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-5.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"nghttp2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-5.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"libnghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-5.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"libnghttp2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-5.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-5.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-5.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"nghttp2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-5.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libnghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libnghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"nghttp2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libnghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libnghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"nghttp2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libnghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libnghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"nghttp2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"libnghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_0.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"libnghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_0.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_0.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_0.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"nghttp2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_0.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libnghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libnghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"nghttp2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libnghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libnghttp2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"nghttp2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libnghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-3.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libnghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-3.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-3.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-3.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"nghttp2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-3.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-9.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"nodejs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-9.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"nodejs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-9.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-9.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-9.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"nodejs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-9.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"nodejs-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-9.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.19.4-1.16.20.2.9.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libnghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libnghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"nghttp2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"libnghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"libnghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"nghttp2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"libnghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"libnghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"nghttp2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-4.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.19.1-3.module+el8.8.0+22005+6f8bb252"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"nodejs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.19.1-3.module+el8.8.0+22005+6f8bb252"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"nodejs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.19.1-3.module+el8.8.0+22005+6f8bb252"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"nodejs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.19.1-3.module+el8.8.0+22005+6f8bb252"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"nodejs-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.19.1-3.module+el8.8.0+22005+6f8bb252"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"nodejs-full-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.19.1-3.module+el8.8.0+22005+6f8bb252"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.module+el8.8.0+19757+8ca87034"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el8.7.0+15582+19c314fa"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"nodejs-packaging-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el8.7.0+15582+19c314fa"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"npm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:10.2.4-1.18.19.1.3.module+el8.8.0+22005+6f8bb252"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.12.2-2.module+el8.9.0+1804+2708cc21"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.module+el8.8.0+1459+02651ab6"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el8.7.0+1072+5b168780"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.module+el9.6.0+32322+a8b1fd01"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.module+el9.5.0+31770+0da7192d"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.module+el9.6.0+32045+2e5d342d"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.module+el9.6.0+32143+ae966e5b"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.module+el9.6.0+32144+1d29a396"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.module+el9.6.0+32185+bd121a25"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.5.0+31770+0da7192d"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.6.0+32045+2e5d342d"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.6.0+32048+5323bb50"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.6.0+32143+ae966e5b"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.6.0+32144+1d29a396"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.6.0+32185+bd121a25"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.6.0+32322+a8b1fd01"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.20.2-1.module+el8.9.0+1803+9ac8b495"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.module+el8.8.0+1459+02651ab6"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el8.7.0+1072+5b168780"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.module+el9.5.0+31770+0da7192d"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.module+el9.6.0+32322+a8b1fd01"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.module+el9.6.0+32045+2e5d342d"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.module+el9.6.0+32143+ae966e5b"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.module+el9.6.0+32144+1d29a396"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-nodemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.module+el9.6.0+32185+bd121a25"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.5.0+31770+0da7192d"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.6.0+32045+2e5d342d"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.6.0+32048+5323bb50"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.6.0+32143+ae966e5b"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.6.0+32144+1d29a396"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.6.0+32185+bd121a25"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.06-4.module+el9.6.0+32322+a8b1fd01"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.20.2-8.el9_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.43.0-5.el9_4.3"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.0-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.17","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.51.0-r20071"},{"fixed":"1.51.0-r20072"},{"fixed":"1.51.0-r20074"},{"fixed":"1.51.0-r20073"},{"fixed":"1.51.0-r20075"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.17","package":"rootio-nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.51.0-r20071"},{"fixed":"1.51.0-r20072"},{"fixed":"1.51.0-r20074"},{"fixed":"1.51.0-r20073"},{"fixed":"1.51.0-r20075"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.18","package":"rootio-nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.57.0-r00072"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.19","package":"rootio-nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.58.0-r00072"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.39.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.39.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.39.2-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-150200.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-150200.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-150200.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-150200.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-150200.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-150200.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-150200.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-150200.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-150200.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-150200.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-150200.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-150200.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-150200.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-150200.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-150200.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-150200.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-150200.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-150200.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-150200.17.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-150200.17.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-150200.17.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-150200.17.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"nghttp2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-150200.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-150200.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.52.0-5.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-1ubuntu0.1~esm2"}]}],"versions":["0.6.7-1","1.3.4-2","1.4.0-1","1.4.0-2","1.5.0-2","1.6.0-1","1.7.0-1","1.7.1-1","1.7.1-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30.0-1ubuntu1+esm2"}]}],"versions":["1.25.0-1","1.27.0-1","1.28.0-1","1.29.0-1","1.29.0-1build1","1.30.0-1","1.30.0-1ubuntu1","1.30.0-1ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-1ubuntu0.3"}]}],"versions":["1.39.2-1","1.40.0-1","1.40.0-1build1","1.40.0-1ubuntu0.1","1.40.0-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.0-1ubuntu0.2"}]}],"versions":["1.43.0-1","1.43.0-1build1","1.43.0-1build2","1.43.0-1build3","1.43.0-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.59.0-1ubuntu0.1"}]}],"versions":["1.55.1-1","1.57.0-1","1.58.0-1","1.59.0-1","1.59.0-1build1","1.59.0-1build2","1.59.0-1build4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-1ubuntu0.1~esm2"}]}],"versions":["0.6.7-1","1.3.4-2","1.4.0-1","1.4.0-2","1.5.0-2","1.6.0-1","1.7.0-1","1.7.1-1","1.7.1-1ubuntu0.1~esm1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30.0-1ubuntu1+esm2"}]}],"versions":["1.25.0-1","1.27.0-1","1.28.0-1","1.29.0-1","1.29.0-1build1","1.30.0-1","1.30.0-1ubuntu1","1.30.0-1ubuntu1+esm1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.0-1ubuntu0.3"}]}],"versions":["1.39.2-1","1.40.0-1","1.40.0-1build1","1.40.0-1ubuntu0.1","1.40.0-1ubuntu0.2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.0-1ubuntu0.2"}]}],"versions":["1.43.0-1","1.43.0-1build1","1.43.0-1build2","1.43.0-1build3","1.43.0-1ubuntu0.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.59.0-1ubuntu0.1"}]}],"versions":["1.55.1-1","1.57.0-1","1.58.0-1","1.59.0-1","1.59.0-1build1","1.59.0-1build2","1.59.0-1build4"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.61.0-1.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"nghttp2","product":"nghttp2"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"sinec nms"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://github.com/nghttp2/nghttp2/security/advisories/GHSA-x6x3-gv8h-m57q","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","article","report"]},{"url":"https://github.com/nghttp2/nghttp2/commit/00201ecd8f982da3b67d4f6868af72a1b03b14e0","tags":["x_refsource_MISC","x_transferred","Patch","fix","web"]},{"url":"https://github.com/nghttp2/nghttp2/commit/d71a4668c6bead55805d18810d633fbb98315af9","tags":["x_refsource_MISC","x_transferred","Patch","fix","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGOME6ZXJG7664IPQNVE3DL67E3YP3HY/","tags":["x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J6ZMXUGB66VAXDW5J6QSTHM5ET25FGSA/","tags":["x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PXJO2EASHM2OQQLGVDY5ZSO7UVDVHTDK/","tags":["x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/04/msg00026.html","tags":["x_transferred","Mailing List","web"]},{"url":"http://www.openwall.com/lists/oss-security/2024/04/03/16","tags":["x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/09/msg00041.html","tags":["Mailing List","web"]},{"url":"https://www.kb.cert.org/vuls/id/421644","tags":["web","advisory","report"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-784301.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2778","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-22025","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-25629","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-27982","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-27983","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-28182","tags":["report"]},{"url":"https://bugzilla.redhat.com/2265713","tags":["report"]},{"url":"https://bugzilla.redhat.com/2268639","tags":["report"]},{"url":"https://bugzilla.redhat.com/2270559","tags":["report"]},{"url":"https://bugzilla.redhat.com/2272764","tags":["report"]},{"url":"https://bugzilla.redhat.com/2275392","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-2778.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2779","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2779.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2780","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-2780.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2853","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2853.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2910","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2910.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3501","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-3501.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4252","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-4252.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-28182","tags":["web","advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-28182","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1765381441.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/28xxx/CVE-2024-28182.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-28182","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0135.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33087","tags":["report"]},{"url":"https://nowotarski.info/http2-continuation-flood/","tags":["web","article"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1389","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2693","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.57/html/red_hat_jboss_core_services_apache_http_server_2.4.57_service_pack_4_release_notes","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268277","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268639","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270497","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270498","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270499","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270500","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2693.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-2004","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-2004","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2004","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2024-2004.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-2379","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-2379","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2379","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2024-2379.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-2398","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-2398","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2398","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2024-2398.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-2466","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-2466","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2466","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2024-2466.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-27316","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-27316","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27316","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-28182","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265713","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270559","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2272764","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275392","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2778.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-22025","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22025","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-25629","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-25629","tags":["advisory"]},{"url":"https://github.com/c-ares/c-ares/security/advisories/GHSA-mg26-v6qh-x48q","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-27982","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27982","tags":["advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/april-2024-security-releases","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-27983","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27983","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2779.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2780.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2853.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2910.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2937","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2937.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3501.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3544","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3544.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3665","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3665.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3701","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3701.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3763","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3763.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3875","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3875.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4252.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4576","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4576.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4721","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4721.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4732","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4732.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4824","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4824.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:2778","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:2779","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:2780","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:2853","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:2910","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:3501","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:4252","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241156-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1221399","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-28182","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241167-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241167-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520002-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-28182","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6754-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6754-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-9511","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-9513","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-44487","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-28182","title":"Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage","description":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync.  This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.","status":"published","published":"2024-04-04T14:41:36.587Z","modified":"2026-10-15T00:40:27.012Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:34:18.597034Z"}],"euvd":[{"id":"EUVD-2024-25307","description":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync.  This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.","status":"published","published":"2024-04-04T14:41:36Z","modified":"2026-10-15T00:40:27Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T17:27:10.207404Z"}],"nvd":[{"id":"CVE-2024-28182","description":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync.  This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.","status":"published","published":"2024-04-04T15:15:38.427Z","modified":"2026-10-15T01:17:41.807Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:09:48.152273Z"}],"osv":[{"id":"BELL-CVE-2024-28182","status":"published","published":"2024-04-04T05:57:15.82413Z","modified":"2026-01-26T09:36:31.017564Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:19.66992Z"},{"id":"CVE-2024-28182","title":"Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage","description":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync.  This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.","status":"published","published":"2024-04-04T14:41:36.587Z","modified":"2026-10-28T10:40:39.016894173Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:44:39.569658Z"},{"id":"DEBIAN-CVE-2024-28182","description":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync.  This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.","status":"published","published":"2024-04-04T15:15:38.427Z","modified":"2026-11-02T12:02:09.617053256Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:42.530184Z"},{"id":"JLSEC-2026-4","title":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C","description":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync.  This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.","status":"published","published":"2026-03-23T22:38:33.248Z","modified":"2026-07-18T00:01:55.525028351Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2024-1389","title":"nghttp2 security update","description":"The framing layer of HTTP/2 is implemented as a form of reusable C library. On top of that, we have implemented HTTP/2 client, server and proxy. We have also developed load test and benchmarking tool for HTTP/2.\r\n\r\nSecurity Fix(es):\r\n\r\nnghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync.  This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.(CVE-2024-28182)","status":"published","published":"2024-04-12T11:06:50Z","modified":"2026-08-18T01:18:20.756762603Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"RHSA-2024:2693","title":"Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP4 security update","status":"published","published":"2024-09-30T20:22:07Z","modified":"2026-10-15T10:07:42Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:2778","title":"Red Hat Security Advisory: nodejs:20 security update","status":"published","published":"2024-09-16T19:10:12Z","modified":"2026-10-15T10:07:43Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:2779","title":"Red Hat Security Advisory: nodejs:18 security update","status":"published","published":"2024-09-16T19:10:03Z","modified":"2026-10-15T10:07:44Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:2780","title":"Red Hat Security Advisory: nodejs:18 security update","status":"published","published":"2024-09-16T19:10:21Z","modified":"2026-10-15T10:07:44Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:2853","title":"Red Hat Security Advisory: nodejs:20 security update","status":"published","published":"2024-09-16T19:10:30Z","modified":"2026-10-15T10:07:47Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:2910","title":"Red Hat Security Advisory: nodejs security update","status":"published","published":"2024-09-16T19:10:38Z","modified":"2026-10-15T10:07:47Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:2937","title":"Red Hat Security Advisory: nodejs security update","status":"published","published":"2024-09-13T23:58:32Z","modified":"2026-10-15T10:07:48Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3501","title":"Red Hat Security Advisory: nghttp2 security update","status":"published","published":"2024-09-13T23:59:57Z","modified":"2026-10-15T10:08:03Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3544","title":"Red Hat Security Advisory: nodejs:18 security update","status":"published","published":"2024-09-13T23:59:14Z","modified":"2026-10-15T10:08:03Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3665","title":"Red Hat Security Advisory: nghttp2 security update","status":"published","published":"2024-09-14T00:00:02Z","modified":"2026-10-15T10:08:09Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3701","title":"Red Hat Security Advisory: nghttp2 security update","status":"published","published":"2024-09-14T00:00:12Z","modified":"2026-10-15T10:08:09Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3763","title":"Red Hat Security Advisory: nghttp2 security update","status":"published","published":"2024-09-13T23:58:58Z","modified":"2026-10-15T10:08:12Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3875","title":"Red Hat Security Advisory: nghttp2 security update","status":"published","published":"2024-09-13T23:59:48Z","modified":"2026-10-15T10:08:12Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:4252","title":"Red Hat Security Advisory: nghttp2 security update","status":"published","published":"2024-09-13T23:59:57Z","modified":"2026-10-15T10:08:18Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4576","title":"Red Hat Security Advisory: nghttp2 security update","status":"published","published":"2024-09-14T00:00:02Z","modified":"2026-10-15T10:08:23Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4721","title":"Red Hat Security Advisory: nodejs security update","status":"published","published":"2024-09-16T19:10:54Z","modified":"2026-10-15T10:08:26Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4732","title":"Red Hat Security Advisory: nghttp2 security update","status":"published","published":"2024-09-14T00:01:02Z","modified":"2026-10-15T10:08:27Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:4824","title":"Red Hat Security Advisory: nodejs:18 security update","status":"published","published":"2024-09-14T00:01:22Z","modified":"2026-10-15T10:08:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RLSA-2024:2779","title":"Important: nodejs:18 security update","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* nodejs: CONTINUATION frames DoS (CVE-2024-27983)\n\n* nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)\n\n* nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)\n\n* nghttp2: CONTINUATION frames DoS (CVE-2024-28182)\n\n* c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-05-09T18:51:51.130698Z","modified":"2025-10-09T05:47:32.489857Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"RLSA-2024:2853","title":"Important: nodejs:20 security update","description":"Node.js is a software development platform for building fast and scalable\nnetwork applications in the JavaScript programming language.\n\nSecurity Fix(es):\n\n* c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)\n\n* nghttp2: CONTINUATION frames DoS (CVE-2024-28182)\n\n* nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)\n\n* nodejs: CONTINUATION frames DoS (CVE-2024-27983)\n\n* nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.","status":"published","published":"2024-06-14T14:00:40.182624Z","modified":"2025-10-09T05:47:32.982509Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"RLSA-2024:2910","title":"Important: nodejs security update","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* nodejs: CONTINUATION frames DoS (CVE-2024-27983)\n\n* nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)\n\n* nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)\n\n* nghttp2: CONTINUATION frames DoS (CVE-2024-28182)\n\n* c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-06-14T14:00:40.182624Z","modified":"2025-10-09T05:47:33.459275Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"RLSA-2024:4252","title":"Moderate: nghttp2 security update","description":"libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.\n\nSecurity Fix(es):\n\n* nghttp2: CONTINUATION frames DoS (CVE-2024-28182)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-05-07T19:11:34.309952Z","modified":"2025-05-07T19:38:06.926381Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"UBUNTU-CVE-2024-28182","description":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync.  This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.","status":"published","published":"2024-04-04T15:15:00Z","modified":"2026-04-22T14:48:15.788159Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T16:54:48.333535Z"},{"id":"ALSA-2024:2778","title":"Important: nodejs:20 security update","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.\n\nSecurity Fix(es):\n\n* c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)\n* nghttp2: CONTINUATION frames DoS (CVE-2024-28182)\n* nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)\n* nodejs: CONTINUATION frames DoS (CVE-2024-27983)\n* nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.","status":"published","published":"2024-05-09T00:00:00Z","modified":"2026-10-29T11:02:20.358541681Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:2779","title":"Important: nodejs:18 security update","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* nodejs: CONTINUATION frames DoS (CVE-2024-27983)\n* nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)\n* nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)\n* nghttp2: CONTINUATION frames DoS (CVE-2024-28182)\n* c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-05-09T00:00:00Z","modified":"2026-10-29T11:31:46.117309169Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:2780","title":"Important: nodejs:18 security update","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* nodejs: CONTINUATION frames DoS (CVE-2024-27983)\n* nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)\n* nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)\n* nghttp2: CONTINUATION frames DoS (CVE-2024-28182)\n* c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-05-09T00:00:00Z","modified":"2026-10-29T11:02:20.497550316Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:2853","title":"Important: nodejs:20 security update","description":"Node.js is a software development platform for building fast and scalable\nnetwork applications in the JavaScript programming language.\n\nSecurity Fix(es):\n\n* c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)\n* nghttp2: CONTINUATION frames DoS (CVE-2024-28182)\n* nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)\n* nodejs: CONTINUATION frames DoS (CVE-2024-27983)\n* nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.","status":"published","published":"2024-05-15T00:00:00Z","modified":"2026-10-29T11:31:46.591581753Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:2910","title":"Important: nodejs security update","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* nodejs: CONTINUATION frames DoS (CVE-2024-27983)\n* nodejs: using the fetch() function to retrieve content from an untrusted URL leads to denial of service (CVE-2024-22025)\n* nodejs: HTTP Request Smuggling via Content Length Obfuscation (CVE-2024-27982)\n* nghttp2: CONTINUATION frames DoS (CVE-2024-28182)\n* c-ares: Out of bounds read in ares__read_line() (CVE-2024-25629)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-05-20T00:00:00Z","modified":"2026-10-29T11:32:08.768002166Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:3501","title":"Moderate: nghttp2 security update","description":"libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.\n\nSecurity Fix(es):\n\n* nghttp2: CONTINUATION frames DoS (CVE-2024-28182)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-05-30T00:00:00Z","modified":"2026-10-29T11:31:45.94221623Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:4252","title":"Moderate: nghttp2 security update","description":"libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.\n\nSecurity Fix(es):\n\n* nghttp2: CONTINUATION frames DoS (CVE-2024-28182)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-07-02T00:00:00Z","modified":"2026-10-29T11:02:21.358769291Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"AZL-38719","title":"CVE-2024-28182 affecting package rust for versions less than 1.75.0-1","description":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync.  This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.","status":"published","published":"2024-04-04T15:15:38Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:19.751978Z"},{"id":"AZL-38728","title":"CVE-2024-28182 affecting package cmake for versions less than 3.29.6-1","description":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync.  This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.","status":"published","published":"2024-04-04T15:15:38Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:19.751978Z"},{"id":"AZL-38881","title":"CVE-2024-28182 affecting package nodejs for versions less than 20.14.0-1","description":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync.  This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.","status":"published","published":"2024-04-04T15:15:38Z","modified":"2026-04-21T04:54:13.665451Z","updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"AZL-38995","title":"CVE-2024-28182 affecting package nghttp2 for versions less than 1.61.0-1","description":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync.  This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.","status":"published","published":"2024-04-04T15:15:38Z","modified":"2026-04-21T04:49:13.126079Z","updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"AZL-39115","title":"CVE-2024-28182 affecting package cmake for versions less than 3.21.4-14","description":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync.  This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.","status":"published","published":"2024-04-04T15:15:38Z","modified":"2026-04-21T04:28:39.961742Z","updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"AZL-39148","title":"CVE-2024-28182 affecting package nodejs18 for versions less than 18.20.3-1","description":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync.  This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.","status":"published","published":"2024-04-04T15:15:38Z","modified":"2026-04-21T04:28:40.118682Z","updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"AZL-39460","title":"CVE-2024-28182 affecting package nghttp2 for versions less than 1.57.0-2","description":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync.  This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.","status":"published","published":"2024-04-04T15:15:38Z","modified":"2026-04-21T04:28:44.007098Z","updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"AZL-39520","title":"CVE-2024-28182 affecting package rust for versions less than 1.68.0-1","description":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync.  This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.","status":"published","published":"2024-04-04T15:15:38Z","modified":"2026-04-21T04:28:44.938163Z","updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"AZL-42099","title":"CVE-2024-28182 affecting package fluent-bit for versions less than 3.1.9-2","description":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync.  This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.","status":"published","published":"2024-04-04T15:15:38Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:19.893001Z"},{"id":"AZL-56113","title":"CVE-2024-28182 affecting package fluent-bit for versions less than 3.0.6-1","description":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync.  This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.","status":"published","published":"2024-04-04T15:15:38Z","modified":"2026-04-21T04:36:04.196307Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"CLSA-2025-1765381441","title":"nghttp2: Fix of CVE-2024-28182","description":"- CVE-2024-28182: fix continuation frame floods via frame count limiting","status":"published","published":"2025-12-10T15:44:05Z","modified":"2026-06-01T00:31:31.912582333Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"DLA-3804-1","title":"nghttp2 - security update","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-03-09T01:21:44.712747Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DLA-3898-1","title":"nghttp2 - security update","status":"published","published":"2024-09-27T00:00:00Z","modified":"2026-03-09T01:19:42.722775Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2024-0135","title":"Updated nghttp2 packages fix security vulnerability","description":"nghttp2 library keeps reading the unbounded number of HTTP/2\nCONTINUATION frames even after a stream is reset to keep HPACK context\nin sync. This causes excessive CPU usage to decode HPACK stream.\nThis update fixes the issue.\nThis is the latest release, which will bring some more fixes and\nimprovements.\n","status":"published","published":"2024-04-17T02:13:57Z","modified":"2026-04-16T04:41:25.712625354Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13825-1","title":"libnghttp2-14-1.61.0-1.1 on GA media","description":"These are all security issues fixed in the libnghttp2-14-1.61.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:29:31.660791Z","updated_at":"2026-11-02T16:58:36.327643Z"}]},"sources_more":{"osv":12}}