Skip to content
Threat Feed
Subscribe

Product

Httpx2 (< 2.12.0)

1 brief RSS
low advisory

HTTPX2 Decompression Amplification Vulnerability (CVE-2026-84382)

The HTTPX2 library, prior to version 2.12.0, is vulnerable to a decompression amplification attack where malicious compressed HTTP responses can trigger large, unbonded memory allocations, leading to denial-of-service via memory exhaustion.

httpx2 denial-of-service vulnerability memory-exhaustion
1c