MEDIUMPyPI
GHSA-652x-xj99-gmcc· CVE-2014-1830, PYSEC-2014-14Exposure of Sensitive Information to an Unauthorized Actor in Requests
Modified: 10/21/2024
package
PyPI/requests
pkg:pypi/requests
MEDIUM5.3PyPI
GHSA-9hjg-9r4m-mvj7· CVE-2024-47081, PYSEC-2026-1872Requests vulnerable to .netrc credentials leak via malicious URLs
Modified: 9/10/2026
MEDIUM5.6PyPI
GHSA-9wx4-h78v-vm56· CVE-2024-35195, PYSEC-2026-1873Requests `Session` object does not verify requests after making first request with verify=False
Modified: 9/10/2026
MEDIUM5.3PyPI
GHSA-cfj3-7x9c-4p3h· CVE-2014-1829, PYSEC-2014-13Exposure of Sensitive Information to an Unauthorized Actor in Requests
Modified: 10/26/2024
MEDIUM4.4PyPI
GHSA-gc5v-m9x4-r6x2· CVE-2026-25645, PYSEC-2026-2275Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function
Modified: 9/10/2026
MEDIUM6.1PyPI
GHSA-j8r2-6x86-q33q· CVE-2023-32681, PYSEC-2023-74Unintended leak of Proxy-Authorization header in requests
Modified: 9/10/2026
MEDIUMPyPI
GHSA-pg2w-x9wp-vw92· CVE-2015-2296, PYSEC-2015-17Python Requests Session Fixation
Modified: 12/1/2024
HIGH7.5PyPI
GHSA-x84v-xcm2-53pg· CVE-2018-18074, PYSEC-2018-28Insufficiently Protected Credentials in Requests
Modified: 10/21/2024
—PyPI
PYSEC-2014-13· CVE-2014-1829, GHSA-cfj3-7x9c-4p3hModified: 11/8/2023
—PyPI
PYSEC-2014-14· CVE-2014-1830, GHSA-652x-xj99-gmccModified: 11/8/2023
—PyPI
PYSEC-2015-17· CVE-2015-2296, GHSA-pg2w-x9wp-vw92Modified: 6/10/2026
—PyPI
PYSEC-2018-28· CVE-2018-18074, GHSA-x84v-xcm2-53pgModified: 11/8/2023
—PyPI
PYSEC-2023-74· CVE-2023-32681, GHSA-j8r2-6x86-q33qModified: 11/8/2023
MEDIUM5.3PyPI
PYSEC-2026-1872· CVE-2024-47081, GHSA-9hjg-9r4m-mvj7Requests vulnerable to .netrc credentials leak via malicious URLs
Modified: 7/7/2026
MEDIUM5.6PyPI
PYSEC-2026-1873· CVE-2024-35195, GHSA-9wx4-h78v-vm56Requests `Session` object does not verify requests after making first request with verify=False
Modified: 7/7/2026
MEDIUM5.5PyPI
PYSEC-2026-2275· CVE-2026-25645, GHSA-gc5v-m9x4-r6x2Modified: 7/13/2026