OESA-2025-2356 python-httpie security update

HTTPie pronounced aitch-tee-tee-pie is a command-line HTTP client. Its goal is to make CLI interaction with web services as human-friendly as possible. HTTPie is designed for testing, debugging, and generally interacting with APIs HTTP servers. The http https commands allow for creating and sendi...

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

CVE-2023-48052 vulnerabilities

Vulnerabilities for packages: httpie...

CVE-2023-48052 vulnerabilities

Vulnerabilities for packages: httpie...

dalineunit (>=0.0.31 <=0.0.69), encapsia-cli (>=0.2.2 <=0.5.1) +4 more potentially affected by CVE-2023-48052 via httpie (>=2.0.0 <=2.6.0)

httpie PYPI version =2.0.0, =0.0.31, =0.2.2, =0.0.14, =1.3.21, =1.9.24 Source cves: CVE-2023-48052 Source advisory: OSV:PYSEC-2023-242...

avaintegration-metapackage (>=6.0.4.3 <=6.0.5.32), dnastack-client-library (>=3.0.324 <=3.1.232) +66 more potentially affected by CVE-2023-48052 via httpie (>=3.2.1 <=3.2.4)

httpie PYPI version =3.2.1, =6.0.4.3, =3.0.324, =0.5.2, =1.0.0, =1.1.2, =0.1.1, =0.1.1, =0.0.1, =0.0.1, =0.1.0, =1.0.0 - httpie-consul =1.0.2 and more Source cves: CVE-2023-48052 Source advisory: OSV:PYSEC-2023-242...

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

UBUNTU-CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

CVE-2023-48052

CVE-2023-48052 affects HTTPie v3.2.2, where missing SSL certificate validation enables a network-based MITM, allowing eavesdropping and compromising confidentiality and integrity. CVSS v3.1 vectors reflect network access, high impact on confidentiality and integrity, and no user interaction requi...