CGA-wr7m-qmh7-839m

Published

Last updated

https://images.chainguard.dev/security/CGA-wr7m-qmh7-839m

Package

httpie

Latest Update

Fixed

Fixed Version

3.2.3-r0

Aliases

Severity

7.4

High

CVSS V3

Summary

HTTPie allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack

Description

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.

References

Updates

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CGA-wr7m-qmh7-839m

Severity

Summary

Description

References

Updates

Product

Why Chainguard

Customers

Company

Resources