Skip to content
OpenAdvisories

Product · python-hyper

hpack

1 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-59980

    hpack: Unbounded variable integer decoding can cause run-away computation on malformed input

    hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on malformed input leading to O(n^2) runtime, effectively blocking further processing with large enough unsanitized input…

    python-hyper hpack python-hpack hpack Debian Ubuntu PyPI