CVE-2026-26275

CVE-2026-26275 is a high-severity vulnerability affecting junkurihara's httpsig-hyper library prior to version 0.0.23, where a flaw in Digest header verification could lead to incorrect success, allowing message body modification to go undetected. The vulnerability has a CVSS score of 7.5, indicating a network-exploitable issue with low attack complexity and high integrity impact, as it could allow an attacker to modify HTTP messages without detection. There is currently no evidence of active exploitation, public exploit code, or significant community discussion, suggesting it is not widely targeted. Users are strongly advised to upgrade to version 0.0.23 or later to mitigate this risk.