Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
Vulnerabilities
search
All ecosystems
2198435
AlmaLinux
5919
Alpaquita
15755
Alpine
4608
Android
3674
Azure Linux
17629
BellSoft Hardened Containers
746
Bitnami
9290
Chainguard
1023658
CleanStart
3591
CRAN
14
crates.io
2732
Debian
68356
Echo
6715
GHC
3
GIT
108035
GitHub Actions
55
Go
9203
Hackage
32
Hex
361
Julia
1713
Linux
29974
Mageia
6227
Maven
7040
MinimOS
144170
npm
228732
NuGet
1869
opam
29
openEuler
8800
openSUSE
14454
OSS-Fuzz
4013
Packagist
7095
Pub
11
PyPI
25163
Red Hat
23331
Rocky Linux
4295
Root
19534
RubyGems
5326
SUSE
23081
SwiftURL
60
TuxCare
9490
Ubuntu
65370
VSCode
21
Wolfi
288261
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-3628
PyPI/h2
h2: Duplicate Host header could facilitate request smuggling
10 Aug
Fix available
Severity - 5.3 (Medium)
GHSA-6hr6-w5qg-qmwg
PyPI/h2
h2: Duplicate Host header could facilitate request smuggling
06 Aug
Fix available
Severity - 5.3 (Medium)
PYSEC-2026-1435
PyPI/h2
h2 allows HTTP Request Smuggling due to illegal characters in headers
07 Jul
Fix available
Severity - 6.9 (Medium)
GHSA-847f-9342-265h
PyPI/h2
h2 allows HTTP Request Smuggling due to illegal characters in headers
25 Aug 2025
Fix available
Severity - 6.9 (Medium)
PyPI - OSV