NG
Product
nghttp2
by nghttp2 · last CVE Jun 28, 2026
On CISA KEVExploited in the wild
9
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 2Low 1
Watch

Add nghttp2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-1544
3.3
1%
Feb 6
nghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion)
Affected: before 1.7.1
Showing 1