Vulnerabilities - http-request-toolkit - PyPI | ReversingLabs Spectra Assure Community

List of known vulnerabilities affecting the software package and the components it embeds. Last refreshed on: 2026/04/21

CVSS Score

CVE Identifier

Summary

Tags

critical

9.8

CVE-2025-15467

OpenSSL is vulnerable to a stack buffer overflow when parsing CMS AuthEnvelopedData messages with maliciously crafted AEAD parameters.

Exploits Exist

Fix Available

high

7.8

CVE-2026-25210

libexpat's doContent function does not properly determine buffer size, leading to potential integer overflow.

Fix Available

high

7.5

CVE-2024-39689

Certifi removes root certificates from GLOBALTRUST due to unresolved compliance issues.

Fix Available

high

7.5

CVE-2025-69420

OpenSSL is vulnerable to a type confusion vulnerability in the TimeStamp Response verification code, potentially leading to a Denial of Service.

Fix Available

high

7.5

CVE-2025-69421

OpenSSL's PKCS12_item_decrypt_d2i_ex function can trigger a NULL pointer dereference when processing a malformed PKCS#12 file, leading to Denial of Service.

Fix Available

high

7.4

CVE-2025-69419

OpenSSL's PKCS12_get_friendlyname function is vulnerable to a one-byte write before the allocated buffer when parsing maliciously crafted PKCS#12 files.

Fix Available

medium

6.5

CVE-2017-17555

FFmpeg libswresample's swri_audio_convert function allows remote attackers to cause a denial of service via a crafted audio file.

Exploits Exist

medium

6.1

CVE-2025-11187

OpenSSL is vulnerable to a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification when parsing untrusted PKCS#12 files.

Fix Available

medium

5.9

CVE-2025-15468

OpenSSL's SSL_CIPHER_find function can cause a NULL pointer dereference, leading to Denial of Service.

Fix Available

medium

5.9

CVE-2025-66199

OpenSSL is vulnerable to a denial-of-service attack via TLS 1.3 certificate compression, allowing an attacker to cause large memory allocations.

Fix Available

http-request-toolkit

SAFE Assessment

Compliance

Security

Threats

INCIDENTS FOR THIS VERSION:

Did you know...

http-request-toolkit

SAFE Assessment

Compliance

Security

Threats

IMPORTANT: All versions of this package have been maliciousLatest version with malware incident detected: 2 months agoVersion: 2.28.5

INCIDENTS FOR THIS VERSION:

Did you know...