Skip to content
Pydantic httpx2
-
CVE-2026-84382
High 7.5
HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification)
0.6%
-
CVE-2026-84381
High 8.1
HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies
<0.1%
-
CVE-2026-84380
Medium 5.6
HTTPX2: Conflicting Content-Length and Transfer-Encoding headers can be auto-generated
0.2%
-
CVE-2026-84379
Medium 5.3
HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headers
0.3%
-
CVE-2026-84378
Medium 5.9
HTTPX2: Quadratic SSE line buffering can cause CPU denial of service
0.3%