{"action":"Upgrade httpx to 0.23.0-1 or later.","affected":[{"fixed":"0.23.0-1","introduced":"0"}],"component":"httpx","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["0.23.0-1"],"id":"tcs_01M5NG0JSND70HFB2QJNE3GHWB","modified_at":"2026-10-23T18:02:30.746912902Z","published_at":"2022-04-28T14:15:07.617Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2021-41945","https://security-tracker.debian.org/tracker/CVE-2021-41945"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2021-41945#Debian:13/httpx","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2021-41945"}],"summary":"Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`."}