python-hyper h2

• CVE-2026-71554 Medium 5.3 h2: Duplicate Host header could facilitate request smuggling 0.4%
• CVE-2025-57804 Medium 6.9 h2 allows HTTP Request Smuggling due to illegal characters in headers 1.9%