Skip to content

Commit d6a0e3d

Browse files
authored
fix: update setup.py (#114)
google-auth-httplib2:0.1.0 | Reference: CVE-2021-21240 | CVSS Score: 7.5 | Category: CWE-400 | httplib2 is a comprehensive HTTP client library for Python. In httplib2 before version 0.19.0, a malicious server which responds with long series of "\xa0" characters in the "www-authenticate" header may cause Denial of Service (CPU burn while parsing header) of the httplib2 client accessing said server. This is fixed in version 0.19.0 which contains a new implementation of auth headers parsing using the pyparsing library.
1 parent be6c2b7 commit d6a0e3d

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

setup.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@
1818

1919
version = "0.1.0"
2020

21-
DEPENDENCIES = ["google-auth", "httplib2 >= 0.15.0"]
21+
DEPENDENCIES = ["google-auth", "httplib2 >= 0.19.0"]
2222

2323

2424
with io.open("README.rst", "r") as fh:

0 commit comments

Comments
 (0)