Logo
›
›component›python3-httplib2
Name
python3-httplib2
Version
0.22.0
Type
library
Description
A comprehensive HTTP client library, httplib2 supports many features left out of other HTTP libraries.
Licenses
MIT
PURL
-
CPE
cpe:2.3:*:httplib2_project:httplib2:0.22.0:*:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
kirkstone
0.20.4
master
0.32.0

Patches#


#
Title
Author
Resolve
1
decompression limited by size and ratio; require python 3.8+
Sergey Shepelev <temotor@gmail.com>
CVE-2026-59939

Vulnerabilities#


Name
Analysis
Description
Patched
httplib2 is a comprehensive HTTP client library for Python. Prior to 0.32.0, httplib2 performs unbounded decompression of HTTP response bodies encoded with Content-Encoding: gzip or deflate in _decompressContent in httplib2/init.py, allowing a malicious or compromised HTTP server to return a small compressed payload that expands to an arbitrarily large size in memory and causes MemoryError or OOM-kill in the client process. This issue is fixed in version 0.32.0.