Skip to content
OpenAdvisories

Package · Debian

python-httpx2

4 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-84382

    HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification)

    HTTPX2 is a next generation HTTP client for Python. Prior to 2.12.0, the HTTPX2 content decoders in src/httpx2/httpx2/_decoders.py fully inflate each gzip, deflate, br, or zstd network chunk before iter_bytes() or aiter_bytes() yields bounded pieces to the ap…

    pydantic httpx2 python-httpx2 httpx2 Debian Ubuntu PyPI