CVE-2021-41945

CriticalCVSS 9.1

Published: 28/04/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.03%

79th percentile - higher than 79% of all known CVEs

Summary

The vulnerability in the httpx library before version 0.23.0 is caused by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`. This can lead to unexpected behavior or potential attacks.

Risk Assessment

The organization may be exposed to attacks involving URL manipulation, which could result in redirection to malicious sites, data leakage, or other security breaches.

Recommendation

Immediately update the httpx library to version 0.23.0 or later, which includes fixes for this vulnerability.

Original NVD description (English source)

Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`.