Vendor
Python-hyper
5 known vulnerabilities in products by Python-hyper, 1 of them actively exploited (CISA KEV).
Key figures
5
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-111497 | Out-of-Bounds Write in Google Brotli Decoder In CISA KEValso in 15 other products | 8.1 | |
| Medium | CVE-2025-57804 | h2 allows HTTP Request Smuggling due to illegal characters in headers | — | |
| Critical | CVE-2025-43859 | h11 accepts some malformed Chunked-Encoding bodies | 9.1 | |
| Medium | CVE-2026-59980 | hpack: Unbounded variable integer decoding can cause run-away computation on malformed input | — | |
| Medium | CVE-2026-71554 | h2: Duplicate Host header could facilitate request smuggling | 5.3 |
News
- Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emergesthehackernews,
- Node2Shell puts Microsoft and Node.js on Brotli patch dutycsoonline,
- PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flawthehackernews,
- Node2Shell CVEsfortinet-psirt,
- Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Softwarethehackernews,
- Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Datathehackernews,