OESA-2025-2356 python-httpie security update

HTTPie pronounced aitch-tee-tee-pie is a command-line HTTP client. Its goal is to make CLI interaction with web services as human-friendly as possible. HTTPie is designed for testing, debugging, and generally interacting with APIs HTTP servers. The http https commands allow for creating and sendi...

encapsia-cli (>=0.1.8, <=0.2.1), httpie-credential-store (1.0.0) +1 more potentially affected by CVE-2023-48052 via httpie (1.0.3)

httpie PYPI version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on httpie and may be impacted: - encapsia-cli =0.1.8, =0.2.1 - httpie-credential-store 1.0.0 - veracode-api-signing 21.3.0 Source cves: CVE-2023-48052 Source advisory:...

dalineunit (>=0.0.31, <=0.0.69) potentially affected by CVE-2023-48052 via httpie (2.0.0)

httpie PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on httpie and may be impacted: - dalineunit =0.0.31, =0.0.69 Source cves: CVE-2023-48052 Source advisory: OSV:GHSA-8R96-8889-QG2X...

navigator-api (>=1.3.21, <=1.9.24) potentially affected by CVE-2023-48052 via httpie (2.3.0)

httpie PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on httpie and may be impacted: - navigator-api =1.3.21, =1.9.24 Source cves: CVE-2023-48052 Source advisory: OSV:GHSA-8R96-8889-QG2X...

CVE-2023-48052 vulnerabilities

Vulnerabilities for packages: httpie...

CVE-2023-48052 vulnerabilities

Vulnerabilities for packages: httpie...

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

UBUNTU-CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

dalineunit (>=0.0.31, <=0.0.69) potentially affected by CVE-2023-48052 via httpie (2.0.0)

httpie PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on httpie and may be impacted: - dalineunit =0.0.31, =0.0.69 Source cves: CVE-2023-48052 Source advisory: OSV:PYSEC-2023-242...

navigator-api (>=1.3.21, <=1.9.24) potentially affected by CVE-2023-48052 via httpie (2.3.0)

httpie PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on httpie and may be impacted: - navigator-api =1.3.21, =1.9.24 Source cves: CVE-2023-48052 Source advisory: OSV:PYSEC-2023-242...

CVE-2023-48052

CVE-2023-48052 affects HTTPie v3.2.2, where missing SSL certificate validation enables a network-based MITM, allowing eavesdropping and compromising confidentiality and integrity. CVSS v3.1 vectors reflect network access, high impact on confidentiality and integrity, and no user interaction requi...