http proxy security

The http proxy security tag covers practical security issues at the boundary between proxy and backend server behavior. Current coverage focuses on CVE-2026-58055, a medium-severity vulnerability in nghttpx, the proxy component in nghttp2, affecting versions through 1.69.0. The issue involves HTTP request and response smuggling when an Upgrade request containing Content-Length is forwarded to reusable backend connections. This tag is relevant to administrators operating nghttpx as a reverse proxy, gateway, or protocol translation layer, with attention to how inconsistent request interpretation can affect shared infrastructure. Follow this archive for analysis of the vulnerability, its conditions, and the need to upgrade affected deployments.