Skip to content
RequestGuard Vulnerabilities
Pricing
Vulnerability intelligence PyPI

requests

Python HTTP for Humans.

PyPI latest 2.34.2 Apache-2.0

Evidence path

Version, exploitation, severity

RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.

1

Latest version

2.34.2

No matching published advisory returned

2

Known exploitation

No KEV match

Checked by exact CVE identifier

3

Highest advisory severity

High

8 active advisories

Check an exact version

The registry confirms the version, then OSV checks advisories for that exact value.

Published records

Advisories

8
GHSA-x84v-xcm2-53pg high

Insufficiently Protected Credentials in Requests

Affected range

ECOSYSTEM: introduced 0; fixed 2.20.0GIT: introduced 0; fixed c45d7c49ea75133e52ab22a8e9e13173938e36ff

Fixed versions: 2.20.0, c45d7c49ea75133e52ab22a8e9e13173938e36ff

CVE-2018-18074 Source ↗Source ↗
GHSA-j8r2-6x86-q33q moderate

Unintended leak of Proxy-Authorization header in requests

Affected range

ECOSYSTEM: introduced 2.3.0; fixed 2.31.0GIT: introduced 0; fixed 74ea7cf7a6a27a4eeb2ae24e162bcc942a6706d5

Fixed versions: 2.31.0, 74ea7cf7a6a27a4eeb2ae24e162bcc942a6706d5

CVE-2023-32681 Source ↗Source ↗
GHSA-pg2w-x9wp-vw92 moderate

Python Requests Session Fixation

Affected range

ECOSYSTEM: introduced 2.1.0; fixed 2.6.0GIT: introduced 0; fixed 3bd8afbff29e50b38f889b2f688785a669b9aafc

Fixed versions: 2.6.0, 3bd8afbff29e50b38f889b2f688785a669b9aafc

CVE-2015-2296 Source ↗Source ↗