PyPI/httpie CVE-2022-24737: medium 6.5, EPSS 1.65%
Exposure of Sensitive Information to an Unauthorized Actor in httpie
Action: Upgrade httpie to 3.1.0 or later.
pip install httpie==3.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.0 | - |
Fixed versions
| 3.1.0 |
Sources
- osv: GHSA-9w4w-cpc8-h2fq
- https://github.com/httpie/httpie/security/advisories/GHSA-9w4w-cpc8-h2fq
- https://nvd.nist.gov/vuln/detail/CVE-2022-24737
- https://github.com/httpie/httpie/commit/65ab7d5caaaf2f95e61f9dd65441801c2ddee38b
- https://github.com/httpie/httpie
- https://github.com/httpie/httpie/releases/tag/3.1.0
- https://github.com/pypa/advisory-database/tree/main/vulns/httpie/PYSEC-2022-34.yaml
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4QZD2AZOL7XLNZVAV6GDNXYU6MFRU5RS
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R5VYSYKEKVZEVEBIWAADGDXG4Y3EWCQ3
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TXFCHGTW3V32GD6GXXJZE5QAOSDT3RTY
CVE-2022-24737 · published · modified · JSON