Search for packages
purl | pkg:pypi/requests@2.20.0 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-3nqp-s5gu-aaae
Aliases: CVE-2023-32681 GHSA-j8r2-6x86-q33q PYSEC-2023-74 |
Unintended leak of Proxy-Authorization header in requests |
Affected by 1 other vulnerability. |
VCID-wsth-kwqz-aaak
Aliases: CVE-2024-35195 GHSA-9wx4-h78v-vm56 |
Requests `Session` object does not verify requests after making first request with verify=False |
Affected by 0 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
VCID-c4ud-sqr9-aaae | The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network. |
CVE-2018-18074
GHSA-x84v-xcm2-53pg PYSEC-2018-28 |