Vulnerabilities > Httplib2 Project
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-02-08 | CVE-2021-21240 | Resource Exhaustion vulnerability in Httplib2 Project Httplib2 httplib2 is a comprehensive HTTP client library for Python. | 5.0 |
| 2020-05-20 | CVE-2020-11078 | CRLF Injection vulnerability in multiple products In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. | 6.8 |
| 2014-01-18 | CVE-2013-2037 | Improper Input Validation vulnerability in multiple products httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. | 2.6 |