THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-84381 (HIGH 8.1) — HTTPX2 is a next generation HTTP client for Python. Prior to 2.10.0, httpcore2 fails to start TLS in src/httpcore2/httpcore2/_sync/socks_proxy.py and src/httpcore2/httpcore2/_async/socks_proxy.py when the remote origin uses wss through a SOCKS5 proxy because the TLS upgrade condi

[NVD] CVE-2026-84381 (HIGH 8.1) — HTTPX2 is a next generation HTTP client for Python. Prior to 2.10.0, httpcore2 fails to start TLS in src/httpcore2/httpcore2/_sync/socks_proxy.py and src/httpcore2/httpcore2/_async/socks_proxy.py when the remote origin uses wss through a SOCKS5 proxy because the TLS upgrade condi

mednvdPublished 2026-09-02

CVE-2026-84381 CVSS: 8.1 HIGH Published: 2026-09-02T19:18:08.217

HTTPX2 is a next generation HTTP client for Python. Prior to 2.10.0, httpcore2 fails to start TLS in src/httpcore2/httpcore2/_sync/socks_proxy.py and src/httpcore2/httpcore2/_async/socks_proxy.py when the remote origin uses wss through a SOCKS5 proxy because the TLS upgrade condition only recognizes https. HTTPX2 exposes the flaw th

Indicators of compromise

CVE-2026-84381cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-84381