What’s Vulnerable › Products

pydantic httpx2 vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your pydantic httpx2 version is affected

Latest pydantic httpx2 vulnerabilities

• CVE-2026-84382 — HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification) (CVSS 7.5)
• CVE-2026-84381 — HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies (CVSS 8.1)
• CVE-2026-84380 — HTTPX2: Conflicting Content-Length and Transfer-Encoding headers can be auto-generated (CVSS 5.6)
• CVE-2026-84379 — HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headers (CVSS 5.3)
• CVE-2026-84378 — HTTPX2: Quadratic SSE line buffering can cause CPU denial of service (CVSS 5.9)