h2 vulnerabilities (PyPI)

2 vulnerabilities.

• h2 PyPI h2: Duplicate Host header could facilitate request smuggling CVE-2026-71554 Public exploitFix available 5.3 MediumAugust 6, 2026
• h2 PyPI h2 allows HTTP Request Smuggling due to illegal characters in headers CVE-2025-57804 Fix available 6.9 MediumAugust 25, 2025