# What changed in hpack

> 1 change in hpack 4 from its official release notes, upgrade guides and advisories: 1 security. Each one cited. Sources checked 2026-10-26. HTML: https://unstale.sh/pypi/hpack/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## hpack 4

### Security

- hpack: Unbounded variable integer decoding can cause run-away computation on malformed input (4.2.0) — [security advisory](https://github.com/advisories/GHSA-8V8H-HG4W-MVQ2)