Httpie - vulnerabilities (CVEs)

4 CVEs in 2 products, 0 in the last 30 days, newest from 2023-11-16.

Products

• Httpie - 4 CVEs
• Httpiehttpie - 1 CVEs

Newest CVEs of Httpie

• CVE-2023-48052 - CVSS 7.4 (high), 2023-11-16: Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.
• CVE-2022-0430 - CVSS 5.3 (medium), 2022-03-15: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0.
• CVE-2022-24737 - CVSS 6.5 (medium), 2022-03-07: HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help users to persistently store some of the state that belongs to…
• CVE-2019-10751 - CVSS 8.8 (high), 2019-08-23: All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attacker to write an arbitrary file with supplied…