Vendorshttplib2 Projecthttplib2all versions
Vulnerabilities

httplib2 Project httplib2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2021-21240
Regular Expression Denial of Service in httplib2
Published 2021-02-08 · Modified
7.5EPSS 0.036
CVE-2026-59939
httplib2: Decompression Bomb Denial of Service via Unbounded gzip/deflate Response Handling
Published 2026-07-08 · Modified
7.5EPSS 0.007
CVE-2020-11078
CRLF injection in httplib2
Published 2020-05-20 · Modified
6.8EPSS 0.026
CVE-2013-2037
httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Published 2014-01-18 · Modified
2.6EPSS 0.013