{"id":"JLSEC-2026-2","summary":"Envoy is a cloud-native high-performance edge/middle/service proxy","details":"Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy’s HTTP/2 codec may leak a header map and bookkeeping structures upon receiving `RST_STREAM` immediately followed by the `GOAWAY` frames from an upstream server. In nghttp2, cleanup of pending requests due to receipt of the `GOAWAY` frame skips de-allocation of the bookkeeping structure and pending compressed header. The error return [code path] is taken if connection is already marked for not sending more requests due to `GOAWAY` frame. The clean-up code is right after the return statement, causing memory leak. Denial of service through memory exhaustion. This vulnerability was patched in versions(s) 1.26.3, 1.25.8, 1.24.9, 1.23.11.","modified":"2026-03-23T22:45:06.469288Z","published":"2026-03-23T22:38:33.248Z","upstream":["CVE-2023-35945"],"database_specific":{"sources":[{"url":"https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2023-35945","imported":"2026-03-23T22:20:24.437Z","modified":"2024-11-21T08:09:01.860Z","published":"2023-07-13T21:15:08.880Z","html_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-35945","id":"CVE-2023-35945"}],"license":"CC-BY-4.0"},"references":[{"type":"WEB","url":"https://github.com/envoyproxy/envoy/security/advisories/GHSA-jfxv-29pc-x22r"},{"type":"WEB","url":"https://github.com/nghttp2/nghttp2/blob/e7f59406556c80904b81b593d38508591bb7523a/lib/nghttp2_session.c#L3346"},{"type":"WEB","url":"https://github.com/envoyproxy/envoy/security/advisories/GHSA-jfxv-29pc-x22r"},{"type":"WEB","url":"https://github.com/nghttp2/nghttp2/blob/e7f59406556c80904b81b593d38508591bb7523a/lib/nghttp2_session.c#L3346"}],"affected":[{"package":{"name":"nghttp2_jll","ecosystem":"Julia","purl":"pkg:julia/nghttp2_jll?uuid=8e850ede-7688-5339-a07c-302acd2aaf8d"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.58.0+0"}]}],"database_specific":{"source":"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-2.json"}}],"schema_version":"1.7.5"}