diff --git a/homeassistant/package_constraints.txt b/homeassistant/package_constraints.txt
index 87f0b1feb76..ac7568b1b69 100644
--- a/homeassistant/package_constraints.txt
+++ b/homeassistant/package_constraints.txt
@@ -32,6 +32,9 @@ pycryptodome>=3.6.6
 # Constrain urllib3 to ensure we deal with CVE-2019-11236 & CVE-2019-11324
 urllib3>=1.24.3
 
+# Constrain httplib2 to protect against CVE-2020-11078
+httplib2>=0.18.0
+
 # Not needed for our supported Python versions
 enum34==1000000000.0.0
 
diff --git a/script/gen_requirements_all.py b/script/gen_requirements_all.py
index fdd0c564efb..c3b7b05dc30 100755
--- a/script/gen_requirements_all.py
+++ b/script/gen_requirements_all.py
@@ -61,6 +61,9 @@ pycryptodome>=3.6.6
 # Constrain urllib3 to ensure we deal with CVE-2019-11236 & CVE-2019-11324
 urllib3>=1.24.3
 
+# Constrain httplib2 to protect against CVE-2020-11078
+httplib2>=0.18.0
+
 # Not needed for our supported Python versions
 enum34==1000000000.0.0