Vulnerabilities for requests

First version without a known vulnerability: 2.33.0

Details

• GHSA-gc5v-m9x4-r6x22026-03-25

  Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function

  Fixed in: 2.33.0

• GHSA-9hjg-9r4m-mvj72025-06-09

  Requests vulnerable to .netrc credentials leak via malicious URLs

  Fixed in: 2.32.4

• GHSA-9wx4-h78v-vm562024-05-20

  Requests `Session` object does not verify requests after making first request with verify=False

  Fixed in: 2.32.0

• GHSA-j8r2-6x86-q33q2023-05-22

  Unintended leak of Proxy-Authorization header in requests

  Fixed in: 2.31.0, 74ea7cf7a6a27a4eeb2ae24e162bcc942a6706d5

• GHSA-cfj3-7x9c-4p3h2022-05-17

  Exposure of Sensitive Information to an Unauthorized Actor in Requests

  Fixed in: 2.3.0

• GHSA-652x-xj99-gmcc2022-05-14

  Exposure of Sensitive Information to an Unauthorized Actor in Requests

  Fixed in: 2.3.0

• GHSA-pg2w-x9wp-vw922022-05-13

  Python Requests Session Fixation

  Fixed in: 2.6.0, 3bd8afbff29e50b38f889b2f688785a669b9aafc

• GHSA-x84v-xcm2-53pg2018-10-29

  Insufficiently Protected Credentials in Requests

  Fixed in: 2.20.0, c45d7c49ea75133e52ab22a8e9e13173938e36ff