{"action":"Upgrade httpx to 0.20.0 or later.","affected":[{"fixed":"0.20.0","introduced":"0"}],"component":"httpx","cve_ids":["CVE-2021-41945"],"ecosystem":"PyPI","epss":0.02118,"exploited":false,"fixed_versions":["0.20.0"],"ghsa_id":"GHSA-h8pj-cxx2-jfg2","id":"tcs_01M5KGGCJ78TAFF5H4KG6MG6H1","modified_at":"2023-11-08T04:07:03.301932Z","published_at":"2022-04-28T14:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-183","https://github.com/encode/httpx","https://github.com/encode/httpx/discussions/1831","https://gist.github.com/lebr0nli/4edb76bbd3b5ff993cf44f2fbce5e571","http://encode.com","https://github.com/encode/httpx/issues/2184","https://github.com/advisories/GHSA-h8pj-cxx2-jfg2"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-183","url":"https://osv.dev/vulnerability/PYSEC-2022-183"}],"summary":"Encode OSS httpx <=1.0.0.beta0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`."}