Minimal H(TTP) framework built for high performance and portability.
90%
Total Score
100
100
100
100
50
| Title | Versions | Severity |
|---|---|---|
CVE-2026-33490 h3 is vulnerable to Use of Incorrectly-Resolved Name or Reference in versions 2.0.1-alpha.0 - 2.0.1-rc.16. | 2.0.1-alpha.0 - 2.0.1-rc.16 | Low |
CVE-2026-33131 h3 is vulnerable to Authentication Bypass by Spoofing in versions 2.0.0-0 - 2.0.1-rc.15. | 2.0.0-0 - 2.0.1-rc.15 | High |
CVE-2026-33129 h3 is vulnerable to Observable Timing Discrepancy in versions 2.0.0-beta.0 - 2.0.0-rc.8. | 2.0.0-beta.0 - 2.0.0-rc.8 | Medium |
CVE-2026-33128 h3 is vulnerable to Improper Neutralization of CRLF Sequences ('CRLF Injection') in versions 2.0.0 - 2.0.1-rc.14 and 0.0.0 - 1.15.6. | 0.0.0 - 1.15.62.0.0 - 2.0.1-rc.14 | High |
CVE-2026-23527 h3 is vulnerable to Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in versions 0.0.0 - 1.15.4. | 0.0.0 - 1.15.4 | High |
| Dependency | Last Release | Score |
|---|---|---|
rou3 Version ^0.8.1 | — | — |
srvx Version ^0.11.15 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

SOC 2Compliant
ISO 27001Compliant