python3Packages.httpx2
httpx2 2.13.1 · pkgs/development/python-modules/httpx2/default.nix
Health
Risk
risk 69 critical
- +60 5 open advisories
- +8 an OSV advisory has a public exploit (CISA)
- +1 meta.description starts with an article
Version
2.13.1 no newer release known to repology
Channels
master 2.13.1 · nixos-unstable 2.9.1 · nixos-26.05 2.3.0 master is ahead of nixos-unstable, nixos-26.05
Hydra
no finished build of nixpkgs/unstable/python3Packages.httpx2.x86_64-linux
Advisories
GHSA-7mj9-2mp8-4m2p high 8.1 EPSS 0.1% HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies (OSV, for this version)
CVE-2026-84381
GHSA-8xx6-hgc6-gc2m high 7.5 EPSS 0.6% HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification) (OSV, for this version)
CVE-2026-84382
GHSA-f2fp-rgf2-35cp medium 5.9 EPSS 0.3% HTTPX2: Quadratic SSE line buffering can cause CPU denial of service (OSV, for this version)
CVE-2026-84378
GHSA-h4x7-gw46-3wm6 medium 5.3 public exploit EPSS 0.3% HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headers (OSV, for this version)
CVE-2026-84379
GHSA-pf96-p4fj-6566 medium 5.6 EPSS 0.2% HTTPX2: Conflicting Content-Length and Transfer-Encoding headers can be auto-generated (OSV, for this version)
CVE-2026-84380
Packaging
meta.description starts with an article
Packagewhat each field means
Description
A next generation HTTP client for Python
License
Platforms
31 platforms: Linux, Darwin
Source provenance
not set: built from source
Outputs
out distStatus
not broken, not insecure, free
Maintainers
Version bumps 0all open bumps
None open.
Pull requests 0
None open.
Closed or merged in the synced window 1
python3Packages.httpx2: use backports-zstd for zstd extra
#573359 by ap-1 · merged 4d ago
Issues 1
python3Packages.httpx2: security issues < 2.12.0 1.severity: security
#559489 by nixpkgs-security-tracker · opened 6w ago · 1 comments