MEDIUM5.3PyPI
GHSA-6hr6-w5qg-qmwg· CVE-2026-71554, PYSEC-2026-3628h2: Duplicate Host header could facilitate request smuggling
Modified: 9/10/2026
package
PyPI/h2
pkg:pypi/h2
MEDIUMPyPI
GHSA-847f-9342-265h· CVE-2025-57804, PYSEC-2026-1435h2 allows HTTP Request Smuggling due to illegal characters in headers
Modified: 9/10/2026
—PyPI
PYSEC-2026-1435· CVE-2025-57804, GHSA-847f-9342-265hh2 allows HTTP Request Smuggling due to illegal characters in headers
Modified: 7/7/2026
MEDIUM5.3PyPI
PYSEC-2026-3628· CVE-2026-71554, GHSA-6hr6-w5qg-qmwgh2: Duplicate Host header could facilitate request smuggling
Modified: 8/10/2026