hypercorn@0.14.2 vulnerabilities

A ASGI Server based on Hyper libraries and inspired by Gunicorn

Direct Vulnerabilities

Known vulnerabilities in the hypercorn package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Denial of Service (DoS)

hypercorn is an A ASGI Server based on Hyper libraries and inspired by Gunicorn

Affected versions of this package are vulnerable to Denial of Service (DoS) in the implementation of the HTTP/2 protocol. An attacker can cause a denial of service (including via DDoS) by rapidly resetting many streams through request cancellation.

How to fix Denial of Service (DoS)?

Upgrade hypercorn to version 0.16.0 or higher.

[,0.16.0)