Vulnerabilities > Httplib2 Project > Httplib2 > 0.7.4

DATE CVE VULNERABILITY TITLE RISK
2020-05-20 CVE-2020-11078 CRLF Injection vulnerability in multiple products
In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server.
network
high complexity
httplib2-project fedoraproject debian CWE-93
6.8