Red Hat Security Advisory

RHSA-2026:8548

nghttp2 security update

Released 2026-04-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.6) libnghttp2-devel-1.43.0-6.el9_6.1, nghttp2-1.43.0-6.el9_6.1
Red Hat Enterprise Linux BaseOS EUS (v.9.6) libnghttp2-1.43.0-6.el9_6.1, nghttp2-1.43.0-6.el9_6.1

TI-2026-21585 CVE-2026-27135

MEDIUM 40

nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00823 Published 2026-03-18 Fixed in 1.68.1 CWE-617