{"action":"Upgrade httplib2 to 0.19.0 or later.","affected":[{"fixed":"0.19.0","introduced":"0"}],"component":"httplib2","cve_ids":["CVE-2021-21240"],"ecosystem":"PyPI","epss":0.03626,"exploited":false,"fixed_versions":["0.19.0"],"ghsa_id":"GHSA-93xj-8mrv-444m","id":"tcs_01M5KGBC07S3Z8KBPAVVR1BZ94","modified_at":"2023-11-08T04:04:39.189613Z","published_at":"2021-02-08T20:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-16","https://github.com/httplib2/httplib2/commit/bd9ee252c8f099608019709e22c0d705e98d26bc","https://github.com/httplib2/httplib2/pull/182","https://github.com/httplib2/httplib2/security/advisories/GHSA-93xj-8mrv-444m","https://pypi.org/project/httplib2"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-16","url":"https://osv.dev/vulnerability/PYSEC-2021-16"}],"summary":"httplib2 is a comprehensive HTTP client library for Python. In httplib2 before version 0.19.0, a malicious server which responds with long series of \"\\xa0\" characters in the \"www-authenticate\" header"}