Python-hyper vulnerabilities

Products

• H2 3

Newest

• python-hyper hpack hpack: Unbounded variable integer decoding can cause run-away computation on malformed input CVE-2026-59980 Fix available 6.3 MediumAugust 19, 2026
• python-hyper h2 h2: Duplicate Host header could facilitate request smuggling CVE-2026-71554 Public exploitFix available 5.3 MediumAugust 6, 2026
• andybalholm brotli, 7-zip p7zip, anthropic bun +34 more +36 more Out-of-Bounds Write in Google Brotli Decoder CVE-2026-111497 In KEVPublic exploitFix available EPSS 82.6% 9.2 CriticalApril 27, 2026
• python-hyper h2 h2 allows HTTP Request Smuggling due to illegal characters in headers CVE-2025-57804 Fix available 6.9 MediumAugust 25, 2025
• python-hyper h11 h11 accepts some malformed Chunked-Encoding bodies CVE-2025-43859 Fix available 9.1 CriticalApril 24, 2025
• h2database h2, debian linux, oracle communications cloud native core policy +2 more RCE in H2 Console CVE-2021-42392 Public exploitFix available EPSS 83.2% 9.8 CriticalJanuary 6, 2022