Skip to content
OpenAdvisories
Medium DLA-2232-1 1 CVE

python-httplib2 - security update

Published Jun 1, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 python-httplib2 0.9+dfsg-2+deb8u1

Vulnerabilities 1

  • Medium 6.8
    CVE-2020-11078

    CRLF injection in httplib2

    In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses httplib2 with u…

    httplib2 httplib2 python-httplib2 httplib2 Debian Ubuntu Azure Linux PyPI