What is GHSA-6pc9-xqrg-wfqw?

GHSA-6pc9-xqrg-wfqw is a security advisory published by GitHub Security Advisories with Medium severity. Exposure of Sensitive information in httpie

Which CVE IDs does GHSA-6pc9-xqrg-wfqw cover?

GHSA-6pc9-xqrg-wfqw covers the following CVE IDs: CVE-2022-0430. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-6pc9-xqrg-wfqw?

GHSA-6pc9-xqrg-wfqw has a CVSS v3 base score of 2.4, published by GitHub Security Advisories.

Which products are affected by GHSA-6pc9-xqrg-wfqw?

GHSA-6pc9-xqrg-wfqw affects 1 product, including: pip/httpie:\u003c 3.1.0.

GHSA-6pc9-xqrg-wfqwMediumCVSS 2.4

Exposure of Sensitive information in httpie

Vendor

GitHub Security Advisories

Published

March 16, 2022

Last Modified

November 18, 2024

🔗 CVE IDs covered (1)

CVE-2022-0430 →

📋 Description

httpie is a modern, user-friendly command-line HTTP client for the API era. Prior to version 3.1.0, all cookies saved to session storage are supercookies. At this time, there is no known workaround. Users are recommended to update to version 3.1.0.

🎯 Affected products1

pip/httpie:< 3.1.0

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2022-0430
https://github.com/httpie/httpie/commit/65ab7d5caaaf2f95e61f9dd65441801c2ddee38b
https://huntr.dev/bounties/dafb2e4f-c6b6-4768-8ef5-b396cd6a801f
https://github.com/pypa/advisory-database/tree/main/vulns/httpie/PYSEC-2022-167.yaml
https://github.com/advisories/GHSA-6pc9-xqrg-wfqw