Search for packages
purl | pkg:pypi/requests@2.6.0 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-3nqp-s5gu-aaae
Aliases: CVE-2023-32681 GHSA-j8r2-6x86-q33q PYSEC-2023-74 |
Unintended leak of Proxy-Authorization header in requests |
Affected by 1 other vulnerability. |
VCID-c4ud-sqr9-aaae
Aliases: CVE-2018-18074 GHSA-x84v-xcm2-53pg PYSEC-2018-28 |
The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network. |
Affected by 2 other vulnerabilities. |
VCID-wsth-kwqz-aaak
Aliases: CVE-2024-35195 GHSA-9wx4-h78v-vm56 |
Requests `Session` object does not verify requests after making first request with verify=False |
Affected by 0 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
VCID-ck1f-qh2d-aaab | The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a redirect. |
CVE-2015-2296
GHSA-pg2w-x9wp-vw92 PYSEC-2015-17 |