H2 (Python-hyper) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-08-06. Vendor: Python-hyper.

CVEs of H2

• CVE-2026-71554 - CVSS 5.3 (medium), 2026-08-06: h2 is a pure-Python implementation of a HTTP/2 protocol stack. Versions up to and including 4.4.0 accept request header blocks containing more than one Host…
• CVE-2025-57804 - CVSS 6.9 (medium), 2025-08-25: h2 is a pure-Python implementation of a HTTP/2 protocol stack. Prior to version 4.3.0, an HTTP/2 request splitting vulnerability allows attackers to perform…