hpack vulnerabilities
CVEs whose affected-version data names the hpack package (rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-59980Medium· 6.3hpack is an HTTP/2 Header Encoding for Python
hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on malformed input leading to O(n^2) runtime, effectively blocking further processing with large en…
▾ Sunlitpython-hyper · hpackvia NVD
RUSTSEC-2023-0085NoneHPACK decoder panics on invalid input
HPACK decoder panics on invalid input
▾ Sunlithpack · hpackvia OSV