[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-27135":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T11:19:25.255Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":19,"aliases":20,"duplicate_of":9,"upstream":21,"downstream":22,"duplicates":123,"related":124,"reserved_at":9,"published_at":143,"modified_at":144,"state":145,"summary":146,"references_raw":155,"kevs":387,"epss":388,"epss_history":391,"metrics":665,"affected":673},"CVE-2026-27135","nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-617","Reachable Assertion","The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.","weakness","Draft","Base",[],[],[],[],[23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121],{"_key":24},"SUSE-SU-2026:1056-1",{"_key":26},"SUSE-SU-2026:1074-1",{"_key":28},"OPENSUSE-SU-2026:10437-1",{"_key":30},"SUSE-SU-2026:20833-1",{"_key":32},"SUSE-SU-2026:20870-1",{"_key":34},"OPENSUSE-SU-2026:20413-1",{"_key":36},"SUSE-SU-2026:20925-1",{"_key":38},"SUSE-SU-2026:20950-1",{"_key":40},"SUSE-SU-2026:1247-1",{"_key":42},"SUSE-SU-2026:1350-1",{"_key":44},"USN-8233-1",{"_key":46},"USN-8233-2",{"_key":48},"MGASA-2026-0199",{"_key":50},"ALPINE-CVE-2026-27135",{"_key":52},"DEBIAN-CVE-2026-27135",{"_key":54},"SUSE-SU-2026:2633-1",{"_key":56},"OPENSUSE-SU-2026:11121-1",{"_key":58},"SUSE-SU-2026:2647-1",{"_key":60},"RHSA-2026:7666",{"_key":62},"RHSA-2026:7667",{"_key":64},"RHSA-2026:7668",{"_key":66},"RHSA-2026:8538",{"_key":68},"RHSA-2026:8539",{"_key":70},"RHSA-2026:8540",{"_key":72},"RHSA-2026:8541",{"_key":74},"RHSA-2026:8545",{"_key":76},"RHSA-2026:8546",{"_key":78},"RHSA-2026:8547",{"_key":80},"RHSA-2026:8548",{"_key":82},"RHSA-2026:8868",{"_key":84},"SUSE-SU-2026:22368-1",{"_key":86},"SUSE-SU-2026:2695-1",{"_key":88},"RHSA-2026:27200",{"_key":90},"UBUNTU-CVE-2026-27135",{"_key":92},"OPENSUSE-SU-2026:21058-1",{"_key":94},"OPENSUSE-SU-2026:21236-1",{"_key":96},"SUSE-SU-2026:22565-1",{"_key":98},"RHSA-2026:6190",{"_key":100},"RHSA-2026:7080",{"_key":102},"RHSA-2026:7123",{"_key":104},"RHSA-2026:7302",{"_key":106},"RHSA-2026:7310",{"_key":108},"RHSA-2026:7350",{"_key":110},"RHSA-2026:7670",{"_key":112},"RHSA-2026:7675",{"_key":114},"RHSA-2026:7896",{"_key":116},"RHSA-2026:7983",{"_key":118},"RHSA-2026:8339",{"_key":120},"RHSA-2026:9711",{"_key":122},"RHSA-2026:9874",[],[125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142],{"_key":24},{"_key":26},{"_key":28},{"_key":30},{"_key":32},{"_key":34},{"_key":36},{"_key":38},{"_key":40},{"_key":42},{"_key":54},{"_key":56},{"_key":58},{"_key":84},{"_key":86},{"_key":92},{"_key":94},{"_key":96},"2026-03-18T17:59:02.045Z","2026-07-15T01:14:36.116Z","Modified",{"cisa_kev":147,"cisa_ransomware":147,"cisa_vendor":9,"epss_severity":148,"epss_score":149,"severity":150,"severity_score":151,"severity_version":152,"severity_source":153,"severity_vector":154,"severity_status":145},false,"low",0.00775,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[156,164,169,175,179,185,190,195,199,203,207,211,215,219,223,227,231,235,239,243,247,251,255,259,263,267,271,275,279,283,287,291,295,299,303,307,311,315,319,323,327,331,335,339,343,347,351,355,359,363,367,371,375,379,383],{"url":157,"sources":158,"tags":160},"https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6",[153,159],"nvd",[161,162,163],"X Refsource CONFIRM","Patch","Vendor Advisory",{"url":165,"sources":166,"tags":167},"https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1",[153,159],[168,162],"X Refsource MISC",{"url":170,"sources":171,"tags":172},"http://www.openwall.com/lists/oss-security/2026/03/20/3",[153,159],[173,174],"Mailing List","Third Party Advisory",{"url":176,"sources":177,"tags":178},"https://lists.debian.org/debian-lts-announce/2026/05/msg00025.html",[153,159],[],{"url":180,"sources":181,"tags":182},"https://access.redhat.com/security/cve/CVE-2026-27135",[153],[183,184],"VDB Entry","X Refsource REDHAT",{"url":186,"sources":187,"tags":188},"https://bugzilla.redhat.com/show_bug.cgi?id=2448754",[153],[189,184],"Issue Tracking",{"url":191,"sources":192,"tags":193},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27135.json",[153],[194],"X Sadp Csaf Vex",{"url":196,"sources":197,"tags":198},"https://access.redhat.com/errata/RHSA-2026:27200",[153],[163,184],{"url":200,"sources":201,"tags":202},"https://access.redhat.com/errata/RHSA-2026:21695",[153],[163,184],{"url":204,"sources":205,"tags":206},"https://access.redhat.com/errata/RHSA-2026:13812",[153],[163,184],{"url":208,"sources":209,"tags":210},"https://access.redhat.com/errata/RHSA-2026:21690",[153],[163,184],{"url":212,"sources":213,"tags":214},"https://access.redhat.com/errata/RHSA-2026:15087",[153],[163,184],{"url":216,"sources":217,"tags":218},"https://access.redhat.com/errata/RHSA-2026:14773",[153],[163,184],{"url":220,"sources":221,"tags":222},"https://access.redhat.com/errata/RHSA-2026:20087",[153],[163,184],{"url":224,"sources":225,"tags":226},"https://access.redhat.com/errata/RHSA-2026:17596",[153],[163,184],{"url":228,"sources":229,"tags":230},"https://access.redhat.com/errata/RHSA-2026:21656",[153],[163,184],{"url":232,"sources":233,"tags":234},"https://access.redhat.com/errata/RHSA-2026:20040",[153],[163,184],{"url":236,"sources":237,"tags":238},"https://access.redhat.com/errata/RHSA-2026:8868",[153],[163,184],{"url":240,"sources":241,"tags":242},"https://access.redhat.com/errata/RHSA-2026:7310",[153],[163,184],{"url":244,"sources":245,"tags":246},"https://access.redhat.com/errata/RHSA-2026:7666",[153],[163,184],{"url":248,"sources":249,"tags":250},"https://access.redhat.com/errata/RHSA-2026:7080",[153],[163,184],{"url":252,"sources":253,"tags":254},"https://access.redhat.com/errata/RHSA-2026:7675",[153],[163,184],{"url":256,"sources":257,"tags":258},"https://access.redhat.com/errata/RHSA-2026:8339",[153],[163,184],{"url":260,"sources":261,"tags":262},"https://access.redhat.com/errata/RHSA-2026:7123",[153],[163,184],{"url":264,"sources":265,"tags":266},"https://access.redhat.com/errata/RHSA-2026:7670",[153],[163,184],{"url":268,"sources":269,"tags":270},"https://access.redhat.com/errata/RHSA-2026:9711",[153],[163,184],{"url":272,"sources":273,"tags":274},"https://access.redhat.com/errata/RHSA-2026:9874",[153],[163,184],{"url":276,"sources":277,"tags":278},"https://access.redhat.com/errata/RHSA-2026:7983",[153],[163,184],{"url":280,"sources":281,"tags":282},"https://access.redhat.com/errata/RHSA-2026:7896",[153],[163,184],{"url":284,"sources":285,"tags":286},"https://access.redhat.com/errata/RHSA-2026:7302",[153],[163,184],{"url":288,"sources":289,"tags":290},"https://access.redhat.com/errata/RHSA-2026:7350",[153],[163,184],{"url":292,"sources":293,"tags":294},"https://access.redhat.com/errata/RHSA-2026:7667",[153],[163,184],{"url":296,"sources":297,"tags":298},"https://access.redhat.com/errata/RHSA-2026:8541",[153],[163,184],{"url":300,"sources":301,"tags":302},"https://access.redhat.com/errata/RHSA-2026:8539",[153],[163,184],{"url":304,"sources":305,"tags":306},"https://access.redhat.com/errata/RHSA-2026:8538",[153],[163,184],{"url":308,"sources":309,"tags":310},"https://access.redhat.com/errata/RHSA-2026:8540",[153],[163,184],{"url":312,"sources":313,"tags":314},"https://access.redhat.com/errata/RHSA-2026:8546",[153],[163,184],{"url":316,"sources":317,"tags":318},"https://access.redhat.com/errata/RHSA-2026:8545",[153],[163,184],{"url":320,"sources":321,"tags":322},"https://access.redhat.com/errata/RHSA-2026:8547",[153],[163,184],{"url":324,"sources":325,"tags":326},"https://access.redhat.com/errata/RHSA-2026:8548",[153],[163,184],{"url":328,"sources":329,"tags":330},"https://access.redhat.com/errata/RHSA-2026:7668",[153],[163,184],{"url":332,"sources":333,"tags":334},"https://access.redhat.com/errata/RHSA-2026:25096",[153],[163,184],{"url":336,"sources":337,"tags":338},"https://access.redhat.com/errata/RHSA-2026:19724",[153],[163,184],{"url":340,"sources":341,"tags":342},"https://access.redhat.com/errata/RHSA-2026:19725",[153],[163,184],{"url":344,"sources":345,"tags":346},"https://access.redhat.com/errata/RHSA-2026:16008",[153],[163,184],{"url":348,"sources":349,"tags":350},"https://access.redhat.com/errata/RHSA-2026:16030",[153],[163,184],{"url":352,"sources":353,"tags":354},"https://access.redhat.com/errata/RHSA-2026:16009",[153],[163,184],{"url":356,"sources":357,"tags":358},"https://access.redhat.com/errata/RHSA-2026:16174",[153],[163,184],{"url":360,"sources":361,"tags":362},"https://access.redhat.com/errata/RHSA-2026:14937",[153],[163,184],{"url":364,"sources":365,"tags":366},"https://access.redhat.com/errata/RHSA-2026:6190",[153],[163,184],{"url":368,"sources":369,"tags":370},"https://access.redhat.com/errata/RHSA-2026:9832",[153],[163,184],{"url":372,"sources":373,"tags":374},"https://access.redhat.com/errata/RHSA-2026:27201",[153],[163,184],{"url":376,"sources":377,"tags":378},"https://access.redhat.com/errata/RHSA-2026:11768",[153],[163,184],{"url":380,"sources":381,"tags":382},"https://access.redhat.com/errata/RHSA-2026:10065",[153],[163,184],{"url":384,"sources":385,"tags":386},"https://cert-portal.siemens.com/productcert/html/ssa-019113.html",[153],[],[],{"date":389,"score":149,"percentile":390},"2026-07-05",0.51309,[392,396,399,403,406,409,412,415,418,421,424,427,429,432,435,438,441,444,447,450,453,456,459,462,465,468,471,474,477,480,483,485,489,492,496,499,502,505,508,511,513,516,519,522,525,528,531,534,537,540,543,546,549,552,554,557,560,564,567,570,573,576,579,582,585,589,592,595,599,602,605,608,611,614,617,620,623,626,629,632,635,638,641,644,646,649,652,655,658,662],{"date":393,"score":394,"percentile":395},"2026-03-19",0.00013,0.0189,{"date":397,"score":394,"percentile":398},"2026-03-20",0.01891,{"date":400,"score":401,"percentile":402},"2026-03-21",0.00017,0.03816,{"date":404,"score":401,"percentile":405},"2026-03-22",0.03811,{"date":407,"score":401,"percentile":408},"2026-03-23",0.03812,{"date":410,"score":401,"percentile":411},"2026-03-24",0.03959,{"date":413,"score":401,"percentile":414},"2026-03-25",0.03983,{"date":416,"score":401,"percentile":417},"2026-03-26",0.03986,{"date":419,"score":401,"percentile":420},"2026-03-27",0.04004,{"date":422,"score":401,"percentile":423},"2026-03-28",0.04008,{"date":425,"score":401,"percentile":426},"2026-03-29",0.04,{"date":428,"score":401,"percentile":417},"2026-03-30",{"date":430,"score":401,"percentile":431},"2026-03-31",0.03968,{"date":433,"score":401,"percentile":434},"2026-04-01",0.03961,{"date":436,"score":401,"percentile":437},"2026-04-02",0.04001,{"date":439,"score":401,"percentile":440},"2026-04-03",0.04017,{"date":442,"score":401,"percentile":443},"2026-04-04",0.04018,{"date":445,"score":401,"percentile":446},"2026-04-05",0.04014,{"date":448,"score":401,"percentile":449},"2026-04-06",0.0402,{"date":451,"score":401,"percentile":452},"2026-04-07",0.04032,{"date":454,"score":401,"percentile":455},"2026-04-08",0.04038,{"date":457,"score":401,"percentile":458},"2026-04-09",0.04057,{"date":460,"score":401,"percentile":461},"2026-04-10",0.04064,{"date":463,"score":401,"percentile":464},"2026-04-11",0.0403,{"date":466,"score":401,"percentile":467},"2026-04-12",0.04016,{"date":469,"score":401,"percentile":470},"2026-04-13",0.03988,{"date":472,"score":401,"percentile":473},"2026-04-14",0.03962,{"date":475,"score":401,"percentile":476},"2026-04-15",0.03956,{"date":478,"score":401,"percentile":479},"2026-04-16",0.03971,{"date":481,"score":401,"percentile":482},"2026-04-17",0.03981,{"date":484,"score":401,"percentile":414},"2026-04-18",{"date":486,"score":487,"percentile":488},"2026-04-19",0.00018,0.04693,{"date":490,"score":487,"percentile":491},"2026-04-20",0.04685,{"date":493,"score":494,"percentile":495},"2026-04-21",0.00024,0.06714,{"date":497,"score":494,"percentile":498},"2026-04-22",0.06712,{"date":500,"score":494,"percentile":501},"2026-04-23",0.06732,{"date":503,"score":494,"percentile":504},"2026-04-24",0.06711,{"date":506,"score":494,"percentile":507},"2026-04-25",0.06729,{"date":509,"score":494,"percentile":510},"2026-04-26",0.0672,{"date":512,"score":494,"percentile":498},"2026-04-27",{"date":514,"score":494,"percentile":515},"2026-04-28",0.06698,{"date":517,"score":494,"percentile":518},"2026-04-29",0.06713,{"date":520,"score":494,"percentile":521},"2026-04-30",0.06725,{"date":523,"score":494,"percentile":524},"2026-05-01",0.06722,{"date":526,"score":494,"percentile":527},"2026-05-02",0.06755,{"date":529,"score":494,"percentile":530},"2026-05-03",0.06747,{"date":532,"score":494,"percentile":533},"2026-05-04",0.06731,{"date":535,"score":494,"percentile":536},"2026-05-05",0.06742,{"date":538,"score":494,"percentile":539},"2026-05-06",0.06771,{"date":541,"score":494,"percentile":542},"2026-05-07",0.06873,{"date":544,"score":494,"percentile":545},"2026-05-08",0.06891,{"date":547,"score":494,"percentile":548},"2026-05-09",0.06937,{"date":550,"score":494,"percentile":551},"2026-05-10",0.06948,{"date":553,"score":494,"percentile":548},"2026-05-11",{"date":555,"score":494,"percentile":556},"2026-05-12",0.06958,{"date":558,"score":494,"percentile":559},"2026-05-13",0.06956,{"date":561,"score":562,"percentile":563},"2026-05-14",0.00027,0.07723,{"date":565,"score":562,"percentile":566},"2026-05-15",0.07725,{"date":568,"score":562,"percentile":569},"2026-05-16",0.07744,{"date":571,"score":562,"percentile":572},"2026-05-17",0.07738,{"date":574,"score":562,"percentile":575},"2026-05-18",0.077,{"date":577,"score":562,"percentile":578},"2026-05-19",0.07674,{"date":580,"score":562,"percentile":581},"2026-05-20",0.07664,{"date":583,"score":562,"percentile":584},"2026-05-21",0.07644,{"date":586,"score":587,"percentile":588},"2026-05-22",0.00028,0.08481,{"date":590,"score":587,"percentile":591},"2026-05-23",0.08467,{"date":593,"score":587,"percentile":594},"2026-05-24",0.08473,{"date":596,"score":597,"percentile":598},"2026-05-25",0.0003,0.08866,{"date":600,"score":597,"percentile":601},"2026-05-26",0.08861,{"date":603,"score":597,"percentile":604},"2026-05-27",0.08919,{"date":606,"score":597,"percentile":607},"2026-05-28",0.09058,{"date":609,"score":597,"percentile":610},"2026-05-29",0.09098,{"date":612,"score":597,"percentile":613},"2026-05-30",0.09103,{"date":615,"score":597,"percentile":616},"2026-05-31",0.09087,{"date":618,"score":597,"percentile":619},"2026-06-01",0.09066,{"date":621,"score":597,"percentile":622},"2026-06-02",0.09011,{"date":624,"score":597,"percentile":625},"2026-06-03",0.08964,{"date":627,"score":597,"percentile":628},"2026-06-04",0.08978,{"date":630,"score":597,"percentile":631},"2026-06-05",0.09019,{"date":633,"score":597,"percentile":634},"2026-06-06",0.09036,{"date":636,"score":597,"percentile":637},"2026-06-07",0.09016,{"date":639,"score":597,"percentile":640},"2026-06-08",0.08959,{"date":642,"score":597,"percentile":643},"2026-06-09",0.08987,{"date":645,"score":597,"percentile":637},"2026-06-10",{"date":647,"score":597,"percentile":648},"2026-06-11",0.0904,{"date":650,"score":597,"percentile":651},"2026-06-12",0.09086,{"date":653,"score":597,"percentile":654},"2026-06-13",0.09089,{"date":656,"score":597,"percentile":657},"2026-06-14",0.09076,{"date":659,"score":660,"percentile":661},"2026-06-15",0.0056,0.41973,{"date":663,"score":660,"percentile":664},"2026-06-16",0.42022,[666,671],{"source":153,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":667,"cvss_v4_0":9},{"baseScore":151,"baseSeverity":668,"vectorString":154,"impactScore":669,"exploitabilityScore":670},"HIGH",6,10,{"source":159,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":672,"cvss_v4_0":9},{"baseScore":151,"baseSeverity":668,"vectorString":154,"impactScore":669,"exploitabilityScore":670},[674],{"ecosystem":9,"name":675,"vendor":675,"product":675,"cpe_part":676,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":677},"nghttp2","a",[678],{"version":679,"is_range":680,"range_type":681,"version_start":9,"version_start_type":9,"version_end":682,"version_end_type":683,"fixed_in":9},"\u003C 1.68.1",true,"cpe","1.68.1","excluding"]