TI-2026-20745 CVE-2026-25645 · GHSA-gc5v-m9x4-r6x2
Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function
Priority LOW 24
Requests is a HTTP library.
Vulnerabilities
6 records
TI-2023-15957 CVE-2023-32681 · GHSA-j8r2-6x86-q33q
Unintended leak of Proxy-Authorization header in requests
Priority LOW 33
Requests is a HTTP library.
TI-2018-12846 CVE-2018-18074 · GHSA-x84v-xcm2-53pg
The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an…
Priority MEDIUM 43
The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by…
TI-2015-02029 CVE-2015-2296 · GHSA-pg2w-x9wp-vw92
The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows…
Priority LOW 36
The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a redirect.
TI-2014-01432 CVE-2014-1830 · GHSA-652x-xj99-gmcc
Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive…
Priority LOW 27
Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request.
TI-2014-01431 CVE-2014-1829 · GHSA-cfj3-7x9c-4p3h
Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc…
Priority LOW 27
Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request.