Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some     functions using `httpx.URL.copy_with`. (CVE-2021-41945)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some
    functions using `httpx.URL.copy_with`. (CVE-2021-41945)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e831dd5a-7d8e-4818-aa1f-17dd495584ec advisory.

  - Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some     functions using `httpx.URL.copy_with`. (CVE-2021-41945)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
224155	Linux Distros Unpatched Vulnerability : CVE-2021-41945	Nessus	Misc.	critical
415600	SCA: security update for httpx (GHSA-h8pj-cxx2-jfg2)	Tenable Cloud Security	SCA Checks	critical
415600	SCA: security update for httpx (GHSA-h8pj-cxx2-jfg2)	Tenable Self-Hosted Container Security	SCA Checks	critical
180369	FreeBSD : py-httpx -- input validation vulnerability (e831dd5a-7d8e-4818-aa1f-17dd495584ec)	Nessus	FreeBSD Local Security Checks	critical

Detections

Analytics

CVE-2021-41945

critical

Tenable Plugins

critical

critical

critical

critical