—

PYSEC-2022-183

Quick fix

PYSEC-2022-183 — httpx: upgrade to the fixed version with the command below.

pip install --upgrade 'httpx>=0.20.0'

Details

Encode OSS httpx <=1.0.0.beta0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/httpx

Introduced in: 0Fixed in: 0.20.0

Fixpip install --upgrade 'httpx>=0.20.0'

References

https://github.com/encode/httpx[WEB]
https://github.com/encode/httpx/discussions/1831[WEB]
https://gist.github.com/lebr0nli/4edb76bbd3b5ff993cf44f2fbce5e571[WEB]
http://encode.com[WEB]
https://github.com/encode/httpx/issues/2184[REPORT]
https://github.com/advisories/GHSA-h8pj-cxx2-jfg2[ADVISORY]