Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/nghttp2@1.6.0-1?distro=trixie
purl pkg:deb/debian/nghttp2@1.6.0-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-d26w-y23c-q7d1 Nghttp2 is vulnerable to a heap-use-after-free flaw in idle stream handling code. CVE-2015-8659

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:34:44.988082+00:00 Debian Importer Fixing VCID-d26w-y23c-q7d1 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:36:53.996483+00:00 Debian Importer Fixing VCID-d26w-y23c-q7d1 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:46:59.699271+00:00 Debian Importer Fixing VCID-d26w-y23c-q7d1 https://security-tracker.debian.org/tracker/data/json 38.1.0