GCVE - cpe:2.3:a:httpie:httpie:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:httpie:httpie:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Httpie (`502ec69b-6b32-5e2f-bc85-b38f96f7c6d6`)
Product	Httpie (`e2509be2-fca2-5084-a20d-c667fde9166c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:bitbucket/ratan/httpie`	purl2cpe	2026-06-01 10:12:04.655920
`pkg:deb/debian/httpie`	purl2cpe	2026-06-01 10:12:04.655923
`pkg:deb/ubuntu/httpie`	purl2cpe	2026-06-01 10:12:04.655927
`pkg:docker/clue/httpie`	purl2cpe	2026-06-01 10:12:04.655930
`pkg:github/httpie/httpie`	purl2cpe	2026-06-01 10:12:04.655933
`pkg:pypi/httpie`	purl2cpe	2026-06-01 10:12:04.655936
`pkg:rpm/fedora/httpie`	purl2cpe	2026-06-01 10:12:04.655939
`pkg:rpm/opensuse/httpie`	purl2cpe	2026-06-01 10:12:04.655942
`pkg:sourceforge/httpie.mirror`	purl2cpe	2026-06-01 10:12:04.655946

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-24737`	vulnerable	2026-06-08 05:41:01.490304	Exposure of Sensitive Information to an Unauthorized Actor in httpie MEDIUM (6.5) HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help users to persistently store some of the state that belongs to the outgoing requests and incoming responses on the disk for further usage. Before 3.1.0, HTTPie didn‘t distinguish between cookies and hosts they belonged. This behavior resulted in the exposure of some cookies when there are redirects originating from the actual host to a third party website. Users are advised to upgrade. There are no known workarounds. Published: 2022-03-07T23:10:09.000Z Updated: 2025-04-22T18:20:30.599Z Open on db.gcve.eu Reference links https://github.com/httpie/httpie/security/advisories/GHSA-9w4w-cpc8-h2fq https://github.com/httpie/httpie/commit/65ab7d5caaaf2f95e61f9dd65441801c2ddee38b https://github.com/httpie/httpie/releases/tag/3.1.0 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TXFCHGTW3V32GD6GXXJZE5QAOSDT3RTY/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5VYSYKEKVZEVEBIWAADGDXG4Y3EWCQ3/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-0430`	vulnerable	2026-06-08 05:39:10.036642	Exposure of Sensitive Information to an Unauthorized Actor in httpie/httpie LOW (2.4) Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0. Published: 2022-03-15T14:20:16.000Z Updated: 2024-08-02T23:25:40.480Z Open on db.gcve.eu Reference links https://github.com/httpie/httpie/commit/65ab7d5caaaf2f95e61f9dd65441801c2ddee38b https://huntr.dev/bounties/dafb2e4f-c6b6-4768-8ef5-b396cd6a801f	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10751`	vulnerable	2026-06-08 05:12:25.227019	Details available All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attacker to write an arbitrary file with supplied filename and content to the current directory, by redirecting a request from HTTP to a crafted URL pointing to a server in his or hers control. Published: 2019-08-23T16:38:35.000Z Updated: 2024-08-04T22:32:01.703Z Open on db.gcve.eu Reference links https://snyk.io/vuln/SNYK-PYTHON-HTTPIE-460107 https://github.com/jakubroztocil/httpie/releases/tag/1.0.3 http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00003.html http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00022.html https://lists.debian.org/debian-lts-announce/2019/09/msg00031.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.