CVE-2026-58153

Опубликовано: 29 июл. 2026

Источник: nvd

CVSS3: 8.3

EPSS Низкий

Описание

Apache Traffic Server forwards HTTP/2 origin trailers to HTTP/1 clients without proper chunked framing when converting HTTP/2 to HTTP/1.

This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3.

Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.

Ссылки

https://lists.apache.org/thread/5prl9glcm9g2swnq9hqxvnokylm1gr6d
Vendor Advisory
Mailing List

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*

Версия от 10.0.0 (включая) до 10.1.4 (исключая)

EPSS

Процентиль: 38%

0.00472

Низкий

8.3 High

CVSS3

Дефекты

CWE-444

Связанные уязвимости

CVE-2026-58153

CVSS3: 8.3

ubuntu

8 дней назад

Apache Traffic Server forwards HTTP/2 origin trailers to HTTP/1 clients without proper chunked framing when converting HTTP/2 to HTTP/1. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.

CVE-2026-58153

CVSS3: 8.3

debian

9 дней назад

Apache Traffic Server forwards HTTP/2 origin trailers to HTTP/1 client ...

GHSA-crqg-wq4g-597m

CVSS3: 8.3

github

9 дней назад

EPSS

Процентиль: 38%

0.00472

Низкий

8.3 High

CVSS3

Дефекты

CWE-444