python-httplib2

4 results · Feed

• High 7.5
  CVE-2026-59939

  httplib2: Decompression Bomb Denial of Service via Unbounded gzip/deflate Response Handling

  httplib2 is a comprehensive HTTP client library for Python. Prior to 0.32.0, httplib2 performs unbounded decompression of HTTP response bodies encoded with Content-Encoding: gzip or deflate in _decompressContent in httplib2/init.py, allowing a malicious or co…

  httplib2 httplib2 kubeflow-pipelines-visualization-server python-httplib2 Debian Ubuntu Azure Linux Wolfi PyPI
  Jul 8, 2026
• Medium 6.8
  CVE-2020-11078

  CRLF injection in httplib2

  In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses httplib2 with u…

  httplib2 httplib2 httplib2 python-httplib2 Debian Ubuntu Azure Linux PyPI
  May 20, 2020
• Medium 6.1
  CVE-2015-9251 Public exploit EPSS 30%

  Cross-Site Scripting (XSS) in jquery

  jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

  ruby ceph jquery-rails org.webjars.npm:jquery Ubuntu Azure Linux Alpine npm Maven NuGet RubyGems
  Jan 18, 2018
• Medium 6.1
  CVE-2012-6708 Public exploit

  Cross-Site Scripting in jquery

  jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '<…

  ruby ceph jquery-rails org.webjars.npm:jquery Ubuntu Azure Linux Alpine npm Maven NuGet RubyGems
  Jan 18, 2018