Http 2 - GoKawiil

Apache fixes critical HTTP/2 remote code execution flaw in version 2.4.71

A critical vulnerability, CVE-2026-119618, affects Apache HTTP Server versions 2.4.55 through 2.4.70 when the HTTP/2 module is enabled, potentially letting unauthenticated attackers remotely execute code. The Apache project's advisory says the flaw is fixed in version 2.4.71, which also patches an important mod_md crash bug and a low-severity stack overwrite in mod_vhost_alias. Standalone builds of the module (mod_h2) versions 2.0.8 through 2.0.42 are also affected.

apache.slashdot.org · 2026-11-12

Pydantic launches HTTPX2, a maintained fork of the HTTPX Python HTTP client

Pydantic has released HTTPX2, a new Python HTTP client library that continues the work of the HTTPX project, offering sync and async APIs, HTTP/1.1 and HTTP/2 support, and an optional command-line client. The project is positioned as a stewardship effort to keep the library actively maintained after HTTPX saw reduced development activity.

github.com · 2026-08-28