Skip to content
OpenAdvisories

Package · Ubuntu

python-httpx2

5 known vulnerabilities.

All Critical High Medium Low Exploited only

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-84382

    HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification)

    HTTPX2 is a next generation HTTP client for Python. Prior to 2.12.0, the HTTPX2 content decoders in src/httpx2/httpx2/_decoders.py fully inflate each gzip, deflate, br, or zstd network chunk before iter_bytes() or aiter_bytes() yields bounded pieces to the ap…

    pydantic httpx2 python-httpx2 httpx2 Debian Ubuntu PyPI
  • High 8.1
    CVE-2026-84381

    HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies

    HTTPX2 is a next generation HTTP client for Python. Prior to 2.10.0, httpcore2 fails to start TLS in src/httpcore2/httpcore2/_sync/socks_proxy.py and src/httpcore2/httpcore2/_async/socks_proxy.py when the remote origin uses wss through a SOCKS5 proxy because …

    pydantic httpx2 httpcore2 httpx2 Ubuntu PyPI