TI-2021-04343 CVE-2021-21240 · GHSA-93xj-8mrv-444m
Regular Expression Denial of Service in httplib2
Priority LOW 39
httplib2 is a comprehensive HTTP client library for Python.
RHSA-2021:2116
Red Hat OpenStack Platform 16.1.6 (python-httplib2) security update
Released 2021-05-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenStack Platform 16.1 python-httplib2-0.13.1-2.el8ost, python3-httplib2-0.13.1-2.el8ost
Fixes 2 records
TI-2020-08952 CVE-2020-11078 · GHSA-gg84-qgv9-w4pq
CRLF injection in httplib2
Priority LOW 35
In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server.