requests vulnerabilities (PyPI)

8 vulnerabilities.

• requests PyPI Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function CVE-2026-25645 Public exploitFix available 4.4 MediumMarch 25, 2026
• requests PyPI Requests vulnerable to .netrc credentials leak via malicious URLs CVE-2024-47081 Fix available 5.3 MediumJune 6, 2025
• requests PyPI Requests `Session` object does not verify requests after making first request with verify=False CVE-2024-35195 Fix available 5.6 MediumMay 20, 2024
• requests PyPI Unintended leak of Proxy-Authorization header in requests CVE-2023-32681 Public exploitFix available 6.1 MediumMay 22, 2023
• requests PyPI Insufficiently Protected Credentials in Requests CVE-2018-18074 Public exploitFix available 7.5 HighOctober 9, 2018
• requests PyPI Python Requests Session Fixation CVE-2015-2296 Fix available 6.8 MediumMarch 16, 2015
• requests PyPI Exposure of Sensitive Information to an Unauthorized Actor in Requests CVE-2014-1830 Fix available 5.0 MediumSeptember 19, 2014
• requests PyPI Exposure of Sensitive Information to an Unauthorized Actor in Requests CVE-2014-1829 Fix available 5.0 MediumSeptember 19, 2014