Skip to content
Ppython-hyper
Products
| Product | CVEs | Exploited | Latest |
|---|
| h2 | 2 | – | Aug 6, 2026 |
| h11 | 1 | – | Apr 24, 2025 |
| hpack | 1 | – | Sep 23, 2026 |
Exploited and recent CVEs
-
CVE-2026-59980
Medium 6.3
hpack: Unbounded variable integer decoding can cause run-away computation on malformed input
0.3%
-
CVE-2026-71554
Medium 5.3
h2: Duplicate Host header could facilitate request smuggling
0.4%
-
CVE-2025-57804
Medium 6.9
h2 allows HTTP Request Smuggling due to illegal characters in headers
1.9%
-
CVE-2025-43859
Critical 9.1
h11 accepts some malformed Chunked-Encoding bodies
0.6%