Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
httplib2 is a comprehensive HTTP client library for Python. In httplib2 before version 0.19.0, a malicious server which responds with long series of "\xa0" characters in the "www-authenticate" header may cause Denial of Service (CPU burn while parsing header) of the httplib2 client accessing said server. This is fixed in version 0.19.0 which contains a new implementation of auth headers parsing using the pyparsing library.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
[467583833] Vulnerability: CVE-2021-21240 affecting GitOnBorg::chrome-internal::chrome::tools::cr2goog http://crbug.com/467583833
Post summary
The text reports CVE‑2021‑21240 affecting a Chrome internal component and links to a Chromium bug tracker entry.
[462293362] Vulnerability: CVE-2021-21240 affecting GitOnBorg::chromium::infra::luci::luci-py http://crbug.com/462293362
Post summary
The post merely notes that CVE‑2021‑21240 affects a specific component and cites a Chromium bug link, without any deeper exploit or remediation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | httplib2_project | httplib2 | - | python | - |