nghttpx

The nghttpx tag covers security information about the nghttp2 nghttpx proxy, including CVE-2026-58055 and its request smuggling risk. Current coverage focuses on how an Upgrade request containing Content-Length can create HTTP request or response desynchronization when forwarded to reusable backend connections. The issue affects nghttpx versions through 1.69.0 and is relevant to administrators operating the software as a reverse proxy, gateway, or protocol translation layer. Articles in this archive explain why a medium-severity rating can still matter in shared infrastructure and highlight upgrading as the primary response for affected deployments.