Vendors / python-hyper Records 5 All Threatist records
Exploited (KEV) 1 In CISA KEV
CVSS critical 2 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now python-hyper records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority CRITICAL 99KEV
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, dis…
CVSS 4.0 CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.82641 · Published 2026-10-22 · Partial fix · 1.0.10, 1.1.1 +2 CWE-252
Priority MEDIUM 48
h11 is a Python implementation of HTTP/1.1.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00594 · Published 2025-04-24 · Partial fix · 0.16.0 CWE-444
Priority MEDIUM 40
h2 is a pure-Python implementation of a HTTP/2 protocol stack.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.01883 · Published 2025-08-25 · Partial fix · 4.3.0 CWE-93
Priority LOW 30
h2 is a pure-Python implementation of a HTTP/2 protocol stack.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00418 · Published 2026-08-06 · Partial fix · 4.4.1 CWE-444
Priority LOW 28
hpack is an HTTP/2 Header Encoding for Python.
CVSS 4.0 MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00302 · Published 2026-09-23 · Partial fix · 4.2.0 CWE-400
Open these records in search → All records by CVSS severity
Critical2 High0 Medium3 Low0 No CVSS0