[issue39603] [security] http.client: HTTP Header Injection in the HTTP method

Larry Hastings report at bugs.python.org
Mon Sep 28 12:20:01 EDT 2020


Larry Hastings <larry at hastings.org> added the comment:

> Also note that httplib (python-2.7.18) seems to be affected too. Any particular reason for it not to be listed in the same vulnerability page?

Yes: 2.7 has been end-of-lifed and is no longer supported.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue39603>
_______________________________________


More information about the Python-bugs-list mailing list