Skip to content
OpenAdvisories

Package · Debian

python-hpack

2 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-59980

    hpack: Unbounded variable integer decoding can cause run-away computation on malformed input

    hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on malformed input leading to O(n^2) runtime, effectively blocking further processing with large enough unsanitized input…

    python-hyper hpack python-hpack hpack Debian Ubuntu PyPI