https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T19:36:48.845983+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2013-2037 CVE-2013-2037 2026-10-02T19:36:48.848777+00:00

httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

 https://vulnerability.circl.lu/vuln/ghsa-q48q-77qv-cf9p GHSA-q48q-77qv-cf9p — httplib2 incorrectly checks SSL certificate 2026-10-02T19:36:48.848862+00:00

Affected: PyPI: httplib2

httplib2 prior to version 0.10.1, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

 https://vulnerability.circl.lu/vuln/pysec-2014-81 PYSEC-2014-81 2026-10-02T19:36:48.848912+00:00

Affected: PyPI: httplib2

httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.