MagicStack / httptools

Fast HTTP parser
MIT License
1.21k stars 83 forks source link

CVE-2021-22959 & CVE-2021-22960 #76

Closed nlsj1985 closed 2 years ago

nlsj1985 commented 2 years ago

I hope I'm not mistaking, I notice the build/ PyPI package needs a update due to CVE-2021-22959 & CVE-2021-22960 in the NodeJS llhttp parser.

https://nodejs.org/fr/blog/vulnerability/oct-2021-security-releases/

thanks!