nghttp2-server vulnerabilities (TuxCare)

4 vulnerabilities.

• nghttp2-server TuxCare nghttp2 Denial of service: Assertion failure due to the missing state validation CVE-2026-27135 Fix available 7.5 HighMarch 18, 2026
• nghttp2-server TuxCare Envoy vulnerable to HTTP/2 memory leak in nghttp2 codec CVE-2023-35945 Fix available 7.5 HighJuly 13, 2023
• nghttp2-server TuxCare Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• nghttp2-server TuxCare Denial of service in nghttp2 CVE-2020-11080 Fix available 3.7 LowJune 3, 2020