CVE-2026-59900
ADVISORY - githubSummary
Netty's HTTP/2-to-HTTP/1.x translation layer (Http2StreamFrameToHttpObjectCodec and InboundHttp2ToHttpAdapter) fails to deduplicate or validate Host headers when an HTTP/2 client supplies both the :authority pseudo-header and a literal host header in a single HEADERS frame. The translator maps :authority to Host and separately copies the literal host header, producing an HttpRequest object containing two Host headers with attacker-controlled differing values.
Common Weakness Enumeration (CWE)
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
NIST
3.9
CVSS SCORE
6.9mediumGitHub
-
CVSS SCORE
6.9mediumDebian
-
Ubuntu
3.9
CVSS SCORE
5.3mediumChainguard
CGA-f267-869r-xg8p
-
minimos
MINI-2389-47c3-v6mh
-
minimos
MINI-25cc-pccj-296v
-
minimos
MINI-2cvg-2pfm-g4cr
-
minimos
MINI-2j5g-734v-gv3h
-
minimos
MINI-2m4j-4w9v-28hm
-
minimos
MINI-2v79-2m69-q5f6
-
minimos
MINI-2vqx-j5px-q375
-
minimos
MINI-2x4q-23hj-p3f2
-
minimos
MINI-37gj-6hfh-cprv
-
minimos
MINI-4q33-8h83-5j39
-
minimos
MINI-5693-f2j3-jg2r
-
minimos
MINI-5vjc-mhp5-rvf6
-
minimos
MINI-66jm-6367-w4r7
-
minimos
MINI-69pq-cpwm-xmh5
-
minimos
MINI-6mpp-74g5-f7cp
-
minimos
MINI-6prv-fc5p-qg3f
-
minimos
MINI-6q6g-2wg2-5rjm
-
minimos
MINI-7cj7-c3h4-5vfr
-
minimos
MINI-7j3h-xr6j-48v6
-
minimos
MINI-7vj2-3gh5-qrp6
-
minimos
MINI-8wfj-vwvj-c4mh
-
minimos
MINI-934m-9735-q62x
-
minimos
MINI-9cwj-79cm-fx5v
-
minimos
MINI-9vfq-6grv-gj4h
-
minimos
MINI-9wph-3hwc-g543
-
minimos
MINI-c3j9-8x74-34vh
-
minimos
MINI-c3wj-2p8x-6wmv
-
minimos
MINI-c432-r99v-246h
-
minimos
MINI-ccj6-wgrj-94v7
-
minimos
MINI-cw63-wj56-p56m
-
minimos
MINI-cx2x-w377-xjm8
-
minimos
MINI-f4jr-hfvr-xxg2
-
minimos
MINI-f8xq-f54c-p5x8
-
minimos
MINI-gq4f-3hx8-9h23
-
minimos
MINI-h56m-hw2p-m54p
-
minimos
MINI-h9g4-6xrp-89p8
-
minimos
MINI-hhhx-m7gm-9qw4
-
minimos
MINI-jch2-9cw6-fx9p
-
minimos
MINI-jhhg-86vw-6mmg
-
minimos
MINI-jp5x-cv5h-4qwj
-
minimos
MINI-mqfq-gj84-rpjw
-
minimos
MINI-mv3v-q2h5-hq72
-
minimos
MINI-p26g-w6cc-59fp
-
minimos
MINI-p4cp-5xcx-9cm5
-
minimos
MINI-p9g4-2xm6-pfx5
-
minimos
MINI-q352-gm34-fqg2
-
minimos
MINI-qv8p-5p48-5j34
-
minimos
MINI-r4qp-frq6-cwvx
-
minimos
MINI-rc86-62cc-fh8h
-
minimos
MINI-w2jr-qfcj-m9jv
-
minimos
MINI-wf8h-867g-22vv
-
minimos
MINI-wh93-gwqp-vg7r
-
minimos
MINI-wpc3-8779-5cwj
-
minimos
MINI-wr4x-m353-vqp4
-
minimos
MINI-xff5-3c35-85rj
-
minimos
MINI-xgq4-qcpp-c65p
-
minimos
MINI-xwv6-v7hh-rcp4
-