Unverified50% confidenceFactExact time
The HTTP2Shell vulnerability affects multiple Python HTTP libraries and applications, and the affected Python packages have high download counts on PyPI.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/24/2026
First Seen
Valid until: 1/22/2027
Sources
Related Entities
Related Claims
UnverifiedThe underlying HTTP client of the Anthropic Python SDK 1.0 switched from httpx to httpx2.66% similarUnverifiedHTTP client libraries such as Python's requests paired with urllib3 and Node.js's axios-retry provide built-in or plugin-based backoff retry support.65% similarVerifiedPython's pickle module executes arbitrary Python code during deserialization, posing a security risk of remote code execution via maliciously crafted files.63% similarUnverifiedDirectly calling the synchronous HTTP library requests (instead of httpx or aiohttp) within a Python asyncio coroutine is a common blocking pitfall.63% similarVerifiedPyPI (Python Package Index) has more than 500,000 open-source libraries.62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1094257API
curl https://kongchang.com/api/v1/knowledge/claims/1094257MCP
get_claim(id=1094257)