CVE-2021-41945: Encode Httpx

Critical severity, CVSS 9.1. EPSS: 2.1% chance of exploitation in the next 30 days.

Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`.

Affected products

• Encode Httpx: before 0.23.0 (fixed in 0.23.0)

Published 2022-04-28. Last modified 2026-07-09.