Search for packages
| purl | pkg:pypi/httplib2@0.9.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-dmwq-v4jy-2qbu
Aliases: CVE-2021-21240 GHSA-93xj-8mrv-444m PYSEC-2021-16 |
denial of service |
Affected by 0 other vulnerabilities. |
|
VCID-vcup-gzng-8bhc
Aliases: CVE-2020-11078 GHSA-gg84-qgv9-w4pq PYSEC-2020-46 |
In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses httplib2 with uri constructed by string concatenation, as opposed to proper urllib building with escaping. This has been fixed in 0.18.0. |
Affected by 1 other vulnerability. |
|
VCID-vxe2-m4u8-duf9
Aliases: CVE-2013-2037 GHSA-q48q-77qv-cf9p PYSEC-2014-81 |
httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. |
Affected by 0 other vulnerabilities. Affected by 2 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||