漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
h2 allows HTTP Request Smuggling due to illegal characters in headers
Vulnerability Description
h2 is a pure-Python implementation of a HTTP/2 protocol stack. Prior to version 4.3.0, an HTTP/2 request splitting vulnerability allows attackers to perform request smuggling attacks by injecting CRLF characters into headers. This occurs when servers downgrade HTTP/2 requests to HTTP/1.1 without properly validating header names/values, enabling attackers to manipulate request boundaries and bypass security controls. This issue has been patched in version 4.3.0.
CVSS Information
N/A
Vulnerability Type
对CRLF序列的转义处理不恰当(CRLF注入)
Vulnerability Title
python-hyper h2 注入漏洞
Vulnerability Description
python-hyper h2是Hyper开源的一个Python HTTP/2的协议实现。 python-hyper h2 4.3.0之前版本存在注入漏洞，该漏洞源于HTTP2请求拆分，可能导致请求走私攻击。
CVSS Information
N/A
Vulnerability Type
N/A