https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 13:17:43 +0000 https://cve.radiocsirt.org/vuln/cve-2016-6287 <p>The &#34;http-client&#34; egg always used a HTTP_PROXY environment variable to determine whether HTTP traffic should be routed via a proxy, even when running as a CGI process. Under several web servers this would mean a user-supplied &#34;Proxy&#34; header could allow an attacker to direct all HTTP requests through a proxy (also known as a &#34;httpoxy&#34; attack). This affects all versions of http-client before 0.10.</p> <p>The &#34;http-client&#34; egg always used a HTTP_PROXY environment variable to determine whether HTTP traffic should be routed via a proxy, even when running as a CGI process. Under several web servers this would mean a user-supplied &#34;Proxy&#34; header could allow an attacker to direct all HTTP requests through a proxy (also known as a &#34;httpoxy&#34; attack). This affects all versions of http-client before 0.10.</p> https://cve.radiocsirt.org/vuln/cve-2016-6287