HT
Product
httpx2
5
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 3Low 0
Watch
Add httpx2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-84381 | 8.1 | Sep 2 | HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies Affected: >= 2.6.0, < 2.10.0 |
| CVE-2026-84382 | 7.5 | Sep 2 | HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification) Affected: < 2.12.0 |
| CVE-2026-84378 | 5.9 | Sep 2 | HTTPX2: Quadratic SSE line buffering can cause CPU denial of service Affected: >= 2.5.0, < 2.10.0 |
| CVE-2026-84380 | 5.6 | Sep 2 | HTTPX2: Conflicting Content-Length and Transfer-Encoding headers can be auto-generated Affected: < 2.11.0 |
| CVE-2026-84379 | 5.3 | Sep 2 | HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headers Affected: < 2.11.0 |
Showing 5