Known vulnerabilities in nghttp2 (Debian package)

Vendor: Debian
Software CPE: cpe:2.3:o:debian:nghttp2_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 4
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nghttp2 (Debian package) nghttp2 (Debian package) is affected by 4 known vulnerabilities: 1 high, 3 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU127046 - Improper input validation
CVE-2026-27135
CWE-20 Medium
No
No
1.52.0-1+deb12u3, 1.64.0-1.1+deb13u1 23.04.2026 SB2026042395
SB20260423101
SB20260423102
and 33 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
1.43.0-1+deb11u1, 1.52.0-1+deb12u1 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU20197 - Resource exhaustion
CVE-2019-9513
CWE-400 Medium
No
No
1.18.1-1+deb9u1, 1.36.0-2+deb10u1 13.08.2019 SB2019081323
SB2019081326
SB2019081602
and 51 more
#VU20196 - Resource exhaustion
CVE-2019-9511
CWE-400 Medium
No
No
1.18.1-1+deb9u1, 1.36.0-2+deb10u1 13.08.2019 SB2019081323
SB2019081326
SB2019081602
and 55 more