By vendor
Httplib2_project vulnerabilities
Known CVEs affecting Httplib2_project products, prioritized by severity, with SEC.co remediation and detection guidance.
1 published vulnerability
- CVE-2026-59939HIGH 7.5
httplib2, a widely-used Python HTTP client library, contains a flaw that allows attackers to crash applications using it. When an HTTP server returns a response with gzip or deflate compression, httplib2 decompresses the entire payload into memory without checking its final size. An attacker controlling the server (or intercepting traffic) can send a tiny compressed file that expands to gigabytes in memory, overwhelming the client and causing it to run out of memory. This affects all versions before 0.32.0.