PYSEC-2022-183

vendorUSosv

view advisory published 2022-04-28Licence: CC-BY-4.0

Encode OSS httpx <=1.0.0.beta0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-41945US	critical9.1	2.12% (82nd)	—	2022-04-28
Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`.

references

External citations — patches, advisories, analysis.

http://encode.comWEB
https://gist.github.com/lebr0nli/4edb76bbd3b5ff993cf44f2fbce5e571WEB
https://github.com/advisories/GHSA-h8pj-cxx2-jfg2ADVISORY
https://github.com/encode/httpxWEB
https://github.com/encode/httpx/discussions/1831WEB
https://github.com/encode/httpx/issues/2184REPORT

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan