PYSEC-2022-167.yaml

id: PYSEC-2022-167
details: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository
  httpie/httpie prior to 3.1.0.
affected:
- package:
    name: httpie
    ecosystem: PyPI
    purl: pkg:pypi/httpie
  ranges:
  - type: GIT
    repo: https://github.com/httpie/httpie
    events:
    - introduced: "0"
    - fixed: 65ab7d5caaaf2f95e61f9dd65441801c2ddee38b
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - fixed: 3.1.0
  versions:
  - "0.1"
  - 0.1.1
  - 0.1.2
  - 0.1.3
  - 0.1.4
  - 0.1.5
  - 0.1.6
  - 0.2.0
  - 0.2.1
  - 0.2.2
  - 0.2.3
  - 0.2.4
  - 0.2.4dev
  - 0.2.5
  - 0.2.6
  - 0.2.7
  - 0.3.0
  - 0.3.1
  - 0.4.0
  - 0.4.1
  - 0.5.0
  - 0.5.1
  - 0.6.0
  - 0.7.0
  - 0.7.2
  - 0.8.0
  - 0.9.0
  - 0.9.1
  - 0.9.2
  - 0.9.3
  - 0.9.4
  - 0.9.5
  - 0.9.6
  - 0.9.7
  - 0.9.8
  - 0.9.9
  - 1.0.0
  - 1.0.2
  - 1.0.3
  - 2.0.0
  - 2.1.0
  - 2.2.0
  - 2.3.0
  - 2.4.0
  - 2.5.0
  - 2.6.0
  - 3.0.0
  - 3.0.1
  - 3.0.2
references:
- type: FIX
  url: https://github.com/httpie/httpie/commit/65ab7d5caaaf2f95e61f9dd65441801c2ddee38b
- type: WEB
  url: https://huntr.dev/bounties/dafb2e4f-c6b6-4768-8ef5-b396cd6a801f
- type: ADVISORY
  url: https://github.com/advisories/GHSA-6pc9-xqrg-wfqw
aliases:
- CVE-2022-0430
- GHSA-6pc9-xqrg-wfqw
modified: "2022-03-23T14:28:20.245559Z"
published: "2022-03-15T15:15:00Z"