-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from shared httpx.AsyncClient usage across requests in proxy handlers. The advisory explicitly mentions ForwardHttpProxy, ReverseHttpProxy, and ReverseWebSocketProxy as affected components. These classes' request handling methods would inherently use the shared client instance. The fix in #10 specifically addresses cookie handling in these proxies, confirming their involvement. High confidence comes from: 1) Direct correlation between described vulnerability pattern and proxy request handling methods 2) Workaround instructions specifically naming these components 3) PR#10's focus on modifying client initialization in these proxies.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| fastapi-proxy-lib | pip | < 0.1.0 | 0.1.0 |