Количество 9
Количество 9
BDU:2026-02911
Уязвимость стека протокола http/2 Python-h2, связанная с непринятием мер по нейтрализации последовательностей CRLF, позволяющая нарушителю оказать воздействие на целостность данных
CVE-2025-57804
h2 is a pure-Python implementation of a HTTP/2 protocol stack. Prior to version 4.3.0, an HTTP/2 request splitting vulnerability allows attackers to perform request smuggling attacks by injecting CRLF characters into headers. This occurs when servers downgrade HTTP/2 requests to HTTP/1.1 without properly validating header names/values, enabling attackers to manipulate request boundaries and bypass security controls. This issue has been patched in version 4.3.0.
CVE-2025-57804
h2 is a pure-Python implementation of a HTTP/2 protocol stack. Prior to version 4.3.0, an HTTP/2 request splitting vulnerability allows attackers to perform request smuggling attacks by injecting CRLF characters into headers. This occurs when servers downgrade HTTP/2 requests to HTTP/1.1 without properly validating header names/values, enabling attackers to manipulate request boundaries and bypass security controls. This issue has been patched in version 4.3.0.
CVE-2025-57804
h2 is a pure-Python implementation of a HTTP/2 protocol stack. Prior to version 4.3.0, an HTTP/2 request splitting vulnerability allows attackers to perform request smuggling attacks by injecting CRLF characters into headers. This occurs when servers downgrade HTTP/2 requests to HTTP/1.1 without properly validating header names/values, enabling attackers to manipulate request boundaries and bypass security controls. This issue has been patched in version 4.3.0.
CVE-2025-57804
h2 is a pure-Python implementation of a HTTP/2 protocol stack. Prior t ...
openSUSE-SU-2026:20122-1
Security update for python-h2
SUSE-SU-2025:03273-1
Security update for python-h2
SUSE-SU-2025:03199-1
Security update for python-h2
GHSA-847f-9342-265h
h2 allows HTTP Request Smuggling due to illegal characters in headers
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-02911 Уязвимость стека протокола http/2 Python-h2, связанная с непринятием мер по нейтрализации последовательностей CRLF, позволяющая нарушителю оказать воздействие на целостность данных | CVSS3: 5.3 | 2% Низкий | 12 месяцев назад |
 | CVE-2025-57804 h2 is a pure-Python implementation of a HTTP/2 protocol stack. Prior to version 4.3.0, an HTTP/2 request splitting vulnerability allows attackers to perform request smuggling attacks by injecting CRLF characters into headers. This occurs when servers downgrade HTTP/2 requests to HTTP/1.1 without properly validating header names/values, enabling attackers to manipulate request boundaries and bypass security controls. This issue has been patched in version 4.3.0. | 2% Низкий | 12 месяцев назад | |
 | CVE-2025-57804 h2 is a pure-Python implementation of a HTTP/2 protocol stack. Prior to version 4.3.0, an HTTP/2 request splitting vulnerability allows attackers to perform request smuggling attacks by injecting CRLF characters into headers. This occurs when servers downgrade HTTP/2 requests to HTTP/1.1 without properly validating header names/values, enabling attackers to manipulate request boundaries and bypass security controls. This issue has been patched in version 4.3.0. | CVSS3: 5.3 | 2% Низкий | 12 месяцев назад |
 | CVE-2025-57804 h2 is a pure-Python implementation of a HTTP/2 protocol stack. Prior to version 4.3.0, an HTTP/2 request splitting vulnerability allows attackers to perform request smuggling attacks by injecting CRLF characters into headers. This occurs when servers downgrade HTTP/2 requests to HTTP/1.1 without properly validating header names/values, enabling attackers to manipulate request boundaries and bypass security controls. This issue has been patched in version 4.3.0. | 2% Низкий | 12 месяцев назад | |
| CVE-2025-57804 h2 is a pure-Python implementation of a HTTP/2 protocol stack. Prior t ... | 2% Низкий | 12 месяцев назад | |
 | openSUSE-SU-2026:20122-1 Security update for python-h2 | 2% Низкий | 7 месяцев назад | |
| SUSE-SU-2025:03273-1 Security update for python-h2 | 2% Низкий | 11 месяцев назад | |
| SUSE-SU-2025:03199-1 Security update for python-h2 | 2% Низкий | 11 месяцев назад | |
| GHSA-847f-9342-265h h2 allows HTTP Request Smuggling due to illegal characters in headers | 2% Низкий | 12 месяцев назад |
Уязвимостей на страницу