Skip to content
OpenAdvisories
Medium USN-8495-1 1 CVE

nghttp2 vulnerability

Published Jul 2, 2026 · Updated Jul 2, 2026

Ecosystem: Ubuntu

Summary

It was discovered that the nghttp2 nghttpx proxy incorrectly handled
HTTP/1.1 Upgrade requests that included a Content-Length header and body.
A remote attacker could possibly use this issue to perform HTTP request and
response smuggling attacks against backend services.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS nghttp2 1.43.0-1ubuntu0.4
Ubuntu · 24.04 LTS 24.04:LTS nghttp2 1.59.0-1ubuntu0.4
Ubuntu · 25.10 nghttp2 1.64.0-1.1ubuntu1.2
Ubuntu · 26.04 LTS 26.04:LTS nghttp2 1.68.0-2ubuntu0.2

Vulnerabilities 1

  • Medium 5.4
    CVE-2026-58055

    nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-Length

    nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header and body onto reusable keep-alive backend connections, re-adding the Upgrade and Connection headers while passing Content-Length verbatim. A …

    nghttp2 nghttp2 fluent-bit nghttp2 Debian Ubuntu Azure Linux Alpine Wolfi

References

  • report
    https://ubuntu.com/security/CVE-2026-58055