CVE-2023-48052: Httpie

High severity, CVSS 7.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.

Affected products

• Httpie Httpie: version 3.2.2 only

Published 2023-11-16. Last modified 2026-06-17.