ROOT-APP-MAVEN-CVE-2026-47244 CVE-2026-47244 in io.netty:netty-codec-http2 - Patched by Root

Root has patched CVE-2026-47244 in the io.netty:netty-codec-http2 package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-55163 CVE-2025-55163 in io.grpc:grpc-netty-shaded - Patched by Root

Root has patched CVE-2025-55163 in the io.grpc:grpc-netty-shaded package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-33871 CVE-2026-33871 in io.netty:netty-codec-http2 - Patched by Root

Root has patched CVE-2026-33871 in the io.netty:netty-codec-http2 package for Root:Maven. Multiple fixed versions available...

Updated nodejs packages fix security vulnerabilities

http2: retain header memory in session accounting. CVE-2026-56846 http2: defer rst stream while in scope. CVE-2026-56848 permission: avoid granting radix split nodes. CVE-2026-58043 https: distinguish PFX object-array agent keys. CVE-2026-56850 https: bind identity checks to session reuse...

Chromium: CVE-2026-79208 Missing authorization in HTTP2

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-79208

A flaw was found in Chromium. Missing authorization in the HTTP2 protocol could allow a remote attacker to leak sensitive information. This vulnerability is exploited by crafting specific network traffic, leading to unauthorized disclosure of data...

Linux Distros Unpatched Vulnerability : CVE-2026-79208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in HTTP2 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via crafted network traffic...

CVE-2026-79208

Missing authorization in HTTP2 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via crafted network traffic. Chromium security severity: Medium...

DEBIAN-CVE-2026-79208

Missing authorization in HTTP2 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79208

Missing authorization in HTTP2 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79208

Missing authorization in HTTP2 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-79208

CVE-2026-79208 is a missing authorization flaw in the HTTP2 protocol handling of Google Chrome prior to version 152.0.7977.65 . A remote attacker with no privileges required can craft specific network traffic to leak sensitive information , though the attack is rated high complexity and is not co...

CVE-2026-79208

Missing authorization in HTTP2 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via crafted network traffic. Chromium security severity: Medium...

PT-2026-81768

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in HTTP2 allows a remote attacker to leak sensitive information by using crafted network traffic. Recommendations Update Google Chrome to version 152.0.7977.65 or...

Astra Linux – Vulnerability in golang-golang-x-net

In Go, net/http versions before 1.16.12 and 1.17.x, as well as before 1.17.5, allowed uncontrolled memory consumption in the header canonicalization cache through HTTP/2 requests...

Astra Linux – Vulnerability in Apache2

The Apache HTTP Server protocol handler for the HTTP/2 protocol checks the received request headers against the size limitations configured for the server. These restrictions are also applied to the HTTP/1 protocol. If any violations occur, an HTTP response is sent to the client with a status cod...

Astra Linux – Vulnerability in Netty

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty was vulnerable to MadeYouReset DDoS attacks. This is a logical vulnerability in the HTTP/2 protocol, which exploits malformed HTTP/2 control frames to circumvent the maximu...

Astra Linux – Vulnerability in Tomcat9

There is a vulnerability in Apache Tomcat related to uncontrolled resource consumption, especially when an HTTP/2 client does not acknowledge the initial settings frame that reduces the maximum number of concurrent streams allowed. This issue affects Apache Tomcat versions as follows: from...

ROOT-APP-MAVEN-CVE-2024-22201 CVE-2024-22201 in org.eclipse.jetty.http2:jetty-http2-common - Patched by Root

Root has patched CVE-2024-22201 in the org.eclipse.jetty.http2:jetty-http2-common package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-5115 CVE-2025-5115 in org.eclipse.jetty.http2:jetty-http2-common - Patched by Root

Root has patched CVE-2025-5115 in the org.eclipse.jetty.http2:jetty-http2-common package for Root:Maven. Multiple fixed versions available...