Skip to content
OpenAdvisories

Package · Debian

python-hpack

2 known vulnerabilities.

All Critical High Medium Low Exploited only

2 results · Feed

  • Medium 6.3
    CVE-2026-59980

    hpack: Unbounded variable integer decoding can cause run-away computation on malformed input

    hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on malformed input leading to O(n^2) runtime, effectively blocking further processing with large enough unsanitized input…

    python-hyper hpack python-hpack hpack Debian Ubuntu PyPI
  • High 7.5
    CVE-2016-6581

    HPACK Denial of Service vulnerability (HPACK Bomb)

    A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called "HPACK Bomb" attack. This attack occurs when an attacker inserts a header field th…

    hpack python-hpack python-hpack Debian Ubuntu PyPI