Vulnerabilities for httplib2

First version without a known vulnerability: 0.32.0

Details

• GHSA-j5g9-f88f-gfj32026-07-24

  httplib2: Decompression Bomb Denial of Service via Unbounded gzip/deflate Response Handling

  Fixed in: 0.32.0

• GHSA-q48q-77qv-cf9p2022-05-14

  httplib2 incorrectly checks SSL certificate

  Fixed in: 0.10.1, 0.9

• GHSA-93xj-8mrv-444m2021-02-08

  Regular Expression Denial of Service (REDoS) in httplib2

  Fixed in: 0.19.0, bd9ee252c8f099608019709e22c0d705e98d26bc

• GHSA-gg84-qgv9-w4pq2020-05-20

  CRLF injection in httplib2

  Fixed in: 0.18.0, a1457cc31f3206cf691d11d2bf34e98865873e9e