CVE-2026-84378

creationtimestamp| type| source ---|---|--- 2026-09-02 19:40:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2vj7jwfapz2xn...

DEBIAN-CVE-2026-84378

HTTPX2 is a next generation HTTP client for Python. From 2.5.0 until 2.10.0, the HTTPX2 Server-Sent Events parser in src/httpx2/httpx2/sse.py repeatedly copies and rescans buffered text in SSELineDecoder.decode when an attacker-controlled or compromised SSE endpoint splits one unterminated line...

aetherpost (>=1.1.0, <=1.9.0), afterdark-llm-firewall (0.1.0) +113 more potentially affected by CVE-2026-84378 via httpx2 (>=2.5.0, <=2.9.1)

httpx2 PYPI version =2.5.0, =1.1.0, =0.1.5, =0.1.12, =1.3.155, =0.0.2, =0.2.0, =0.1.1, =0.1.2, =0.8.3, =0.3.4, =0.1.0, =0.0.1, =0.1.8, =0.1.12 - async-hermes-agent 0.20.4.1 and more Source cves: CVE-2026-84378 Source advisory: MEND:CVE-2026-84378...