CVE-2026-28898

The swift-nio-http2 library (prior to version 1.44.0 ) contains an HTTP/2-to-HTTP/1.1 request smuggling vulnerability. The HTTP2FramePayloadToHTTP1ServerCodec and HTTP2ToHTTP1ServerCodec components fail to validate pseudo-header values—such as :path, :authority, :scheme, :method, and :status—for ...

PT-2026-48922

Name of the Vulnerable Software and Affected Versions swift-nio-http2 versions prior to 1.44.0 Description The HTTP/2-to-HTTP/1.1 codec, specifically HTTP2FramePayloadToHTTP1ServerCodec and HTTP2ToHTTP1ServerCodec, fails to validate pseudo-header values for control characters before translating...

libsoup 安全漏洞

libsoup is a GNOME HTTP client/server library from the GNOME Project. A security vulnerability exists in libsoup that stems from an HTTP/2 server that does not fully validate pseudo header values, which could lead to a denial of service...