Skip to content
OpenAdvisories
High USN-9071-1 1 CVE

httpie vulnerability

Published Nov 12, 2026 · Updated Nov 13, 2026

Ecosystem: Ubuntu

Summary

It was discovered that HTTPie used the final URL after following redirects
to determine the output filename when downloading files. A remote attacker
could possibly use this issue to write arbitrary files to the current
directory.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS httpie 0.9.2-1ubuntu0.1~esm1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS httpie 0.9.8-2ubuntu0.1~esm1

Vulnerabilities 1

  • High 8.8
    CVE-2019-10751

    Open Redirect in httpie

    All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attacker to write an arbitrary file with supplied filename and content to the current directory, by redirecting a request from HTTP to a crafted URL point…

    httpie httpie httpie httpie Debian Ubuntu Alpine PyPI

References

  • report
    https://ubuntu.com/security/CVE-2019-10751