Root has patched CVE-2026-27135 in the rootio-nghttp2 package for Root:Debian:12. Multiple fixed versions available.
{ "source": "Root", "distro_version": "12", "distro": "debian" }
"root.io.1"
"https://api.root.io/external/osv/ROOT-OS-DEBIAN-12-CVE-2026-27135.json"
true
1.0
"1.52.0-1+deb12u2"
[ "1.52.0-1+deb12u2.root.io.1" ]