Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`.

CVE-2021-41945 (CVE-2021-41945) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

Question 1

What is CVE-2021-41945 — CVE-2021-41945?

Accepted Answer

Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`.

Question 2

What is the authoritative source for CVE-2021-41945?

Accepted Answer

CVE-2021-41945 (CVE-2021-41945) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVSS	9.1 ()
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS	2.12% probability of exploitation · percentile 81.2% · 2026-10-06T12:00:23Z
Last modified	2026-07-09

CVE-2021-41945CVE-2021-41945

Description