CVE-2021-41945

Description

Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`.

Affected Platforms

Weakness Type

CWE-20

References

• https://gist.github.com/lebr0nli/4edb76bbd3b5ff993cf44f2fbce5e571
• https://github.com/encode/httpx
• https://github.com/encode/httpx/discussions/1831
• https://github.com/encode/httpx/issues/2184
• https://github.com/encode/httpx/releases/tag/0.23.0
• https://gist.github.com/lebr0nli/4edb76bbd3b5ff993cf44f2fbce5e571