Call-Cc Http-Client
2 CVEs affecting Call-Cc Http-Client. Latest disclosed: 2017-01-10. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-6287 | High | 7.5 | 2017-01-10 | The "http-client" egg always used a HTTP_PROXY environment variable to determine whether HTTP traffic should be routed via a proxy, even when running as a CGI… |
CVE-2016-6286 | High | 7.5 | 2017-01-10 | The "spiffy-cgi-handlers" egg would convert a nonexistent "Proxy" header to the HTTP_PROXY environment variable, which would allow attackers to direct CGI prog… |