PYSEC-2021-16
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/httplib2/PYSEC-2021-16.yaml
- JSON Data
- https://api.test.osv.dev/v1/vulns/PYSEC-2021-16
- Aliases
- Published
- 2021-02-08T20:15:00Z
- Modified
- 2023-11-01T04:54:09.559230Z
- Summary
- [none]
- Details
-
httplib2 is a comprehensive HTTP client library for Python. In httplib2 before version 0.19.0, a malicious server which responds with long series of "\xa0" characters in the "www-authenticate" header may cause Denial of Service (CPU burn while parsing header) of the httplib2 client accessing said server. This is fixed in version 0.19.0 which contains a new implementation of auth headers parsing using the pyparsing library.
- References
Affected packages
PyPI / httplib2
Package
- Name
- httplib2
- View open source insights on deps.dev
- Purl
- pkg:pypi/httplib2