pydantic httpcore2 vulnerabilities

Latest pydantic httpcore2 CVEs

Newest publication first

1. CVE-2026-84381 HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies

   Published 2026-09-02

   High·CVSS 8.1 EPSS 0.08%

   HTTPX2 is a next generation HTTP client for Python. Prior to 2.10.0, httpcore2 fails to start TLS in src/httpcore2/httpcore2/_sync/socks_proxy.py and src/httpcore2/httpcore2/_async/socks_proxy.py when the remote origin uses wss through a SOCKS5 proxy because the TLS upgrade condi...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.