CVE-2026-55368 - h2o: buffer overflow when using the %{error}x log directive
CVE ID :CVE-2026-55368 Published : Nov. 4, 2026, 10:18 p.m. | 48 minutes ago Description :h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 48b7ae12107fd2b118e4641da49599e9aac8edd8, H2O's access-log formatter could write past its log-line buffer when an...