https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T23:50:14.387955+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-08138 bdu:2026-08138 2026-10-04T23:50:14.409208+00:00 bdu:2026-08138 https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 certfr-2022-avi-267 — De multiples vulnérabilités ont été découvertes dans Juniper Networks Junos Space. Elles permettent à un attaquant de p… 2026-10-04T23:50:14.409246+00:00 certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/cnvd-2016-06302 cnvd-2016-06302 2026-10-04T23:50:14.409266+00:00 cnvd-2016-06302 https://cve.radiocsirt.org/vuln/euvd-2026-85977 EUVD-2026-85977 2026-10-04T23:50:14.409280+00:00 EUVD-2026-85977 https://cve.radiocsirt.org/vuln/fkie_cve-2016-6581 fkie_cve-2016-6581 2026-10-04T23:50:14.409290+00:00

A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called "HPACK Bomb" attack. This attack occurs when an attacker inserts a header field that is exactly the size of the HPACK dynamic header table into the dynamic header table. The attacker can then send a header block that is simply repeated requests to expand that field in the dynamic table. This can lead to a gigantic compression ratio of 4,096 or better, meaning that 16kB of data can decompress to 64MB of data on the target machine.

 https://cve.radiocsirt.org/vuln/ghsa-ffq8-576r-v26g GHSA-ffq8-576r-v26g — HPACK Denial of Service vulnerability (HPACK Bomb) 2026-10-04T23:50:14.409322+00:00

Affected: PyPI: hpack

A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called "HPACK Bomb" attack. This attack occurs when an attacker inserts a header field that is exactly the size of the HPACK dynamic header table into the dynamic header table. The attacker can then send a header block that is simply repeated requests to expand that field in the dynamic table. This can lead to a gigantic compression ratio of 4,096 or better, meaning that 16kB of data can decompress to 64MB of data on the target machine.

 https://cve.radiocsirt.org/vuln/gsd-2016-6581 gsd-2016-6581 2026-10-04T23:50:14.409349+00:00 gsd-2016-6581 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11230-1 openSUSE-SU-2024:11230-1 — python36-hpack-4.0.0-1.6 on GA media 2026-10-04T23:50:14.409360+00:00

python36-hpack-4.0.0-1.6 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2017-87 PYSEC-2017-87 2026-10-04T23:50:14.409377+00:00

Affected: PyPI: hpack

A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called "HPACK Bomb" attack. This attack occurs when an attacker inserts a header field that is exactly the size of the HPACK dynamic header table into the dynamic header table. The attacker can then send a header block that is simply repeated requests to expand that field in the dynamic table. This can lead to a gigantic compression ratio of 4,096 or better, meaning that 16kB of data can decompress to 64MB of data on the target machine.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-6581 UBUNTU-CVE-2016-6581 2026-10-04T23:50:14.409397+00:00

Affected: Ubuntu:16.04:LTS: python-hpack

A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called "HPACK Bomb" attack. This attack occurs when an attacker inserts a header field that is exactly the size of the HPACK dynamic header table into the dynamic header table. The attacker can then send a header block that is simply repeated requests to expand that field in the dynamic table. This can lead to a gigantic compression ratio of 4,096 or better, meaning that 16kB of data can decompress to 64MB of data on the target machine.