Httplib2
Vendor:
First CVE: Jan 18, 2014 · Active for 12 years
4
Total CVEs
More Total CVEs than 75% of tracked products
1.0
Avg CVEs / Year
Bottom 1%
6.1
Avg CVSS
Higher Avg CVSS than 25% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Httplib2 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 18, 2014
12 years ago
Most Recent CVE
Jul 8, 2026
19 days ago
CVE Severity & Scoring
Httplib24 CVEs
25%
25%
50%
All CVEs352,785 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local0 (0.0%)
Network3 (75.0%)
Unknown1 (25.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low2 (50.0%)
High1 (25.0%)
Unknown1 (25.0%)
User Interaction
None3 (75.0%)
Unknown1 (25.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None3 (75.0%)
Unknown1 (25.0%)
Top CVEs
Signals from CVEs in this product scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-59939HIGH httplib2 is a comprehensive HTTP client library for Python. Prior to 0.32.0, httplib2 performs unbounded decompression of HTTP response bodies encoded with Content-Encoding: gzip o | Jul 8, 2026 | 7.5 | 34 | NO | NO |
CVE-2021-21240HIGH httplib2 is a comprehensive HTTP client library for Python. In httplib2 before version 0.19.0, a malicious server which responds with long series of "\xa0" characters in the "www-a | Feb 8, 2021 | 7.5 | 26 | NO | NO |
CVE-2020-11078MEDIUM In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden request | May 20, 2020 | 6.8 | 19 | NO | NO |
httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAl | Jan 18, 2014 | 2.6 | 16 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (4 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (4 CVEs).
Media Mentions
Signals from CVEs in this product scope (4 CVEs).
Top CNAs Publishing CVEs For Httplib2
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 0.8 | 1 | 2.6 | 1.3% | 0 | 0 |