PyPI/httpie CVE-2022-24737: unknown, EPSS 1.65%
HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help users to persistently store some of the state that belongs to the outgoing requests and incoming response
Action: Upgrade httpie to 3.1.0 or later.
pip install httpie==3.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.0 | - |
Fixed versions
| 3.1.0 |
Sources
- osv: PYSEC-2022-34
- https://github.com/httpie/httpie/commit/65ab7d5caaaf2f95e61f9dd65441801c2ddee38b
- https://github.com/httpie/httpie/releases/tag/3.1.0
- https://github.com/httpie/httpie/security/advisories/GHSA-9w4w-cpc8-h2fq
CVE-2022-24737 · published · modified · JSON