Exposure of Sensitive information in httpie

MEDIUM 5.3CVE-2022-0430 · GHSA-6pc9-xqrg-wfqw · PYSEC-2022-167 · Published 15/03/2022 · updated 17/06/2026

In short

CVE-2022-0430 is a MEDIUM (CVSS 5.3) vulnerability affecting httpie, httpie (httpie).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.4% of all vulnerabilities.
Fix: update to 3.1.0 or later.

Package	Affected versions	Patched versions
httpie PyPI	`< 3.1.0`	`3.1.0`
httpie httpie	`< 3.1.0`	`3.1.0`

Description

httpie is a modern, user-friendly command-line HTTP client for the API era. Prior to version 3.1.0, all cookies saved to session storage are supercookies. At this time, there is no known workaround. Users are recommended to update to version 3.1.0.

NVD description

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0.

References

nvd.nist.gov/vuln/detail/CVE-2022-0430 · ADVISORY
httpie/httpie commit 65ab7d5 · WEB
GitHub Advisory GHSA-6pc9-xqrg-wfqw · ADVISORY
httpie/httpie · PACKAGE
pypa/advisory-database · WEB
huntr.dev/bounties/dafb2e4f-c6b6-4768-8ef5-b396cd6a801f · WEB

More vulnerabilities in httpie

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

httpie

PyPI

< 3.1.0

3.1.0

httpie

< 3.1.0

3.1.0

Description

NVD description

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0.

More vulnerabilities in httpie

See all →