https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:45:31.926936+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:12519 ALSA-2025:12519 — Moderate: python-requests security update 2026-10-04T08:45:35.760862+00:00

Affected: AlmaLinux:9: python3-requests, AlmaLinux:9: python3-requests+security, AlmaLinux:9: python3-requests+socks

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* requests: Requests vulnerable to .netrc credentials leak via malicious URLs (CVE-2024-47081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-08576 bdu:2025-08576 2026-10-04T08:45:35.760942+00:00 bdu:2025-08576 https://cve.radiocsirt.org/vuln/bell-cve-2024-47081 BELL-CVE-2024-47081 2026-10-04T08:45:35.760960+00:00

Affected: Alpaquita:23: py3-requests, Alpaquita:25: py3-requests, Alpaquita:stream: py3-requests

 https://cve.radiocsirt.org/vuln/brew-abi3audit-cve-2024-47081 BREW-abi3audit-CVE-2024-47081 — Requests vulnerable to .netrc credentials leak via malicious URLs 2026-10-04T08:45:35.760983+00:00

Affected: Homebrew: abi3audit

### Impact

Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs.

### Workarounds For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on your Requests Session ([docs](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)).

### References https://github.com/psf/requests/pull/6965 https://seclists.org/fulldisclosure/2025/Jun/2

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0585 certfr-2025-avi-0585 — De multiples vulnérabilités ont été découvertes dans VMware Tanzu. Certaines d'entre elles permettent à un attaquant de… 2026-10-04T08:45:35.761008+00:00 certfr-2025-avi-0585 https://cve.radiocsirt.org/vuln/cleanstart-2026-dd95169 Withdrawn: CLEANSTART-2026-DD95169 — Security fixes for CVE-2024-35195, CVE-2024-47081, CVE-2025-8869, CVE-2026-1703, CVE-2026-25645, CVE-2026-3219, CVE-202… 2026-10-04T08:45:35.761025+00:00

Withdrawn by the publisher.

Affected: CleanStart: k8s-sidecar

Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-243547 EUVD-2026-243547 2026-10-04T08:45:35.761047+00:00 EUVD-2026-243547 https://cve.radiocsirt.org/vuln/fkie_cve-2024-47081 fkie_cve-2024-47081 2026-10-04T08:45:35.761058+00:00

Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

 https://cve.radiocsirt.org/vuln/ghsa-9hjg-9r4m-mvj7 GHSA-9hjg-9r4m-mvj7 — Requests vulnerable to .netrc credentials leak via malicious URLs 2026-10-04T08:45:35.761080+00:00

Affected: PyPI: requests

### Impact

Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs.

### Workarounds For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on your Requests Session ([docs](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)).

### References https://github.com/psf/requests/pull/6965 https://seclists.org/fulldisclosure/2025/Jun/2

 https://cve.radiocsirt.org/vuln/msrc_cve-2024-47081 msrc_CVE-2024-47081 — Requests vulnerable to .netrc credentials leak via malicious URLs 2026-10-04T08:45:35.761103+00:00 msrc_CVE-2024-47081 https://cve.radiocsirt.org/vuln/oesa-2025-1674 OESA-2025-1674 — python-requests security update 2026-10-04T08:45:35.761119+00:00

Affected: openEuler:22.03-LTS-SP4: python-requests, openEuler:24.03-LTS: python-requests, openEuler:24.03-LTS-SP1: python-requests, openEuler:20.03-LTS-SP4: python-requests, openEuler:22.03-LTS-SP3: python-requests

Requests is an HTTP library, written in Python, as an alternative to Python's builtin urllib2 which requires work (even method overrides) to perform basic tasks. Features of Requests: - GET, HEAD, POST, PUT, DELETE Requests: + HTTP Header Request Attachment. + Data/Params Request Attachment. + Multipart File Uploads. + CookieJar Support. + Redirection History. + Redirection Recursion Urllib Fix. + Automatic Decompression of GZipped Content. + Unicode URL Support. - Authentication: + URL + HTTP Auth Registry. Security Fix(es):

Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.(CVE-2024-47081)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15281-1 openSUSE-SU-2025:15281-1 — python311-requests-2.32.4-1.1 on GA media 2026-10-04T08:45:35.761153+00:00

python311-requests-2.32.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2026-1872 PYSEC-2026-1872 — Requests vulnerable to .netrc credentials leak via malicious URLs 2026-10-04T08:45:35.761170+00:00

Affected: PyPI: requests

### Impact

Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs.

### Workarounds For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on your Requests Session ([docs](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)).

### References https://github.com/psf/requests/pull/6965 https://seclists.org/fulldisclosure/2025/Jun/2

 https://cve.radiocsirt.org/vuln/rhsa-2025:15121 RHSA-2025:15121 — Red Hat Security Advisory: python-requests security update 2026-10-04T08:45:35.761193+00:00

requests: Requests vulnerable to .netrc credentials leak via malicious URLs

 https://cve.radiocsirt.org/vuln/suse-su-2025:01997-1 SUSE-SU-2025:01997-1 — Security update for python3-requests 2026-10-04T08:45:35.761208+00:00

Security update for python3-requests

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-47081 UBUNTU-CVE-2024-47081 2026-10-04T08:45:35.761223+00:00

Affected: Ubuntu:Pro:14.04:LTS: requests, Ubuntu:Pro:16.04:LTS: requests, Ubuntu:Pro:18.04:LTS: requests, Ubuntu:Pro:20.04:LTS: requests, Ubuntu:22.04:LTS: python-pip, Ubuntu:22.04:LTS: requests, Ubuntu:24.04:LTS: python-pip, Ubuntu:24.04:LTS: requests, Ubuntu:25.10: requests

Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1699 WID-SEC-W-2025-1699 — Red Hat Enterprise Linux (requests): Schwachstelle ermöglicht das Ausspähen von Informationen 2026-10-04T08:45:35.761255+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (requests) ausnutzen, um Informationen auszuspähen.