Product
nghttp2
- First Reported
- Jul 22, 2026
- Latest Reported
- Jul 22, 2026
Reported Context (1)
- Node is a recent example. The fix for the vulnerability came bundled with a SEMVER-MAJOR update to the nghttp2 dependency and the removal of HTTP/2 priority signaling support. The vulnerable behavior and the feature Why Upgrading Dependencies Is Not Always the Right CVE Fix
CVE (1)
MITRE ATT&CK (1)
Vendors (1)
Products (8)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.