nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header and body onto reusable keep-alive backend connections, re-a...
CVE-2026-58055
nghttp2 的 nghttpx 代理（版本 1.69.0 及之前）在处理 HTTP/1.1 Upgrade 请求时存在一个漏洞。当请求同时携带 Content-Length 头部和请求体时，代理会将该请求转发到可复用的后端 keep-a