Search for packages
Package details: pkg:deb/ubuntu/requests@2.4.3-4
purl pkg:deb/ubuntu/requests@2.4.3-4
Next non-vulnerable version 2.18.4-2ubuntu0.1
Latest non-vulnerable version 2.18.4-2ubuntu0.1
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-c4ud-sqr9-aaae
Aliases:
CVE-2018-18074
GHSA-x84v-xcm2-53pg
PYSEC-2018-28
The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
2.18.4-2ubuntu0.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version