CVE-2026-84378

creationtimestamp| type| source ---|---|--- 2026-09-02 19:40:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2vj7jwfapz2xn...

DEBIAN-CVE-2026-84378

HTTPX2 is a next generation HTTP client for Python. From 2.5.0 until 2.10.0, the HTTPX2 Server-Sent Events parser in src/httpx2/httpx2/sse.py repeatedly copies and rescans buffered text in SSELineDecoder.decode when an attacker-controlled or compromised SSE endpoint splits one unterminated line...