Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 22:25:10 +0000 cnvd-2016-05837 https://cve.radiocsirt.org/vuln/cnvd-2016-05837 cnvd-2016-05837 https://cve.radiocsirt.org/vuln/cnvd-2016-05837 EUVD-2026-85715 https://cve.radiocsirt.org/vuln/euvd-2026-85715 EUVD-2026-85715 https://cve.radiocsirt.org/vuln/euvd-2026-85715 fkie_cve-2016-6287 https://cve.radiocsirt.org/vuln/fkie_cve-2016-6287 <p>The &#34;http-client&#34; egg always used a HTTP_PROXY environment variable to determine whether HTTP traffic should be routed via a proxy, even when running as a CGI process. Under several web servers this would mean a user-supplied &#34;Proxy&#34; header could allow an attacker to direct all HTTP requests through a proxy (also known as a &#34;httpoxy&#34; attack). This affects all versions of http-client before 0.10.</p> <p>The &#34;http-client&#34; egg always used a HTTP_PROXY environment variable to determine whether HTTP traffic should be routed via a proxy, even when running as a CGI process. Under several web servers this would mean a user-supplied &#34;Proxy&#34; header could allow an attacker to direct all HTTP requests through a proxy (also known as a &#34;httpoxy&#34; attack). This affects all versions of http-client before 0.10.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-6287 GHSA-xrv7-w6wq-5f4g https://cve.radiocsirt.org/vuln/ghsa-xrv7-w6wq-5f4g <p>The &#34;http-client&#34; egg always used a HTTP_PROXY environment variable to determine whether HTTP traffic should be routed via a proxy, even when running as a CGI process. Under several web servers this would mean a user-supplied &#34;Proxy&#34; header could allow an attacker to direct all HTTP requests through a proxy (also known as a &#34;httpoxy&#34; attack). This affects all versions of http-client before 0.10.</p> <p>The &#34;http-client&#34; egg always used a HTTP_PROXY environment variable to determine whether HTTP traffic should be routed via a proxy, even when running as a CGI process. Under several web servers this would mean a user-supplied &#34;Proxy&#34; header could allow an attacker to direct all HTTP requests through a proxy (also known as a &#34;httpoxy&#34; attack). This affects all versions of http-client before 0.10.</p> https://cve.radiocsirt.org/vuln/ghsa-xrv7-w6wq-5f4g gsd-2016-6287 https://cve.radiocsirt.org/vuln/gsd-2016-6287 gsd-2016-6287 https://cve.radiocsirt.org/vuln/gsd-2016-6287