Most recent entries from all

BREW-http-prompt-CVE-2023-48052 — HTTPie allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack

Affected: Homebrew: http-prompt

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.

EUVD-2026-158568

fkie_cve-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.

GHSA-8r96-8889-qg2x — HTTPie allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack

Affected: PyPI: httpie

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.

gsd-2023-48052

OESA-2025-2356 — python-httpie security update

Affected: openEuler:24.03-LTS: python-httpie

HTTPie (pronounced _aitch-tee-tee-pie_) is a command-line HTTP client. Its goal is to make CLI interaction with web services as human-friendly as possible. HTTPie is designed for testing, debugging, and generally interacting with APIs &amp; HTTP servers. The `http` &amp; `https` commands allow for creating and sending arbitrary HTTP requests. They use simple and natural syntax and provide formatted and colorized output. Security Fix(es):

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.(CVE-2023-48052)

PYSEC-2023-242

Affected: PyPI: httpie

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.

UBUNTU-CVE-2023-48052

Affected: Ubuntu:Pro:14.04:LTS: httpie, Ubuntu:16.04:LTS: httpie, Ubuntu:18.04:LTS: httpie, Ubuntu:20.04:LTS: httpie, Ubuntu:22.04:LTS: httpie, Ubuntu:24.04:LTS: httpie, Ubuntu:25.10: httpie, Ubuntu:26.04:LTS: httpie

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.