https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:34:19 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:12519 <p><strong>Affected:</strong> AlmaLinux:9: python3-requests, AlmaLinux:9: python3-requests+security, AlmaLinux:9: python3-requests+socks</p> <p>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.</p> <p>Security Fix(es):</p> <p>* requests: Requests vulnerable to .netrc credentials leak via malicious URLs (CVE-2024-47081)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: python3-requests, AlmaLinux:9: python3-requests+security, AlmaLinux:9: python3-requests+socks</p> <p>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.</p> <p>Security Fix(es):</p> <p>* requests: Requests vulnerable to .netrc credentials leak via malicious URLs (CVE-2024-47081)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:12519 https://cve.radiocsirt.org/vuln/bdu:2025-08576 bdu:2025-08576 https://cve.radiocsirt.org/vuln/bdu:2025-08576 https://cve.radiocsirt.org/vuln/bell-cve-2024-47081 <p><strong>Affected:</strong> Alpaquita:23: py3-requests, Alpaquita:25: py3-requests, Alpaquita:stream: py3-requests</p> <p><strong>Affected:</strong> Alpaquita:23: py3-requests, Alpaquita:25: py3-requests, Alpaquita:stream: py3-requests</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-47081 https://cve.radiocsirt.org/vuln/brew-abi3audit-cve-2024-47081 <p><strong>Affected:</strong> Homebrew: abi3audit</p> <p>### Impact</p> <p>Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs.</p> <p>### Workarounds For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on your Requests Session ([docs](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)).</p> <p>### References https://github.com/psf/requests/pull/6965 https://seclists.org/fulldisclosure/2025/Jun/2</p> <p><strong>Affected:</strong> Homebrew: abi3audit</p> <p>### Impact</p> <p>Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs.</p> <p>### Workarounds For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on your Requests Session ([docs](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)).</p> <p>### References https://github.com/psf/requests/pull/6965 https://seclists.org/fulldisclosure/2025/Jun/2</p> https://cve.radiocsirt.org/vuln/brew-abi3audit-cve-2024-47081 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0585 certfr-2025-avi-0585 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0585 https://cve.radiocsirt.org/vuln/cleanstart-2026-dd95169 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: k8s-sidecar</p> <p>Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: k8s-sidecar</p> <p>Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-dd95169 https://cve.radiocsirt.org/vuln/euvd-2026-243547 EUVD-2026-243547 https://cve.radiocsirt.org/vuln/euvd-2026-243547 https://cve.radiocsirt.org/vuln/fkie_cve-2024-47081 <p>Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one&#39;s Requests Session.</p> <p>Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one&#39;s Requests Session.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-47081 https://cve.radiocsirt.org/vuln/ghsa-9hjg-9r4m-mvj7 <p><strong>Affected:</strong> PyPI: requests</p> <p>### Impact</p> <p>Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs.</p> <p>### Workarounds For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on your Requests Session ([docs](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)).</p> <p>### References https://github.com/psf/requests/pull/6965 https://seclists.org/fulldisclosure/2025/Jun/2</p> <p><strong>Affected:</strong> PyPI: requests</p> <p>### Impact</p> <p>Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs.</p> <p>### Workarounds For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on your Requests Session ([docs](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)).</p> <p>### References https://github.com/psf/requests/pull/6965 https://seclists.org/fulldisclosure/2025/Jun/2</p> https://cve.radiocsirt.org/vuln/ghsa-9hjg-9r4m-mvj7 https://cve.radiocsirt.org/vuln/msrc_cve-2024-47081 msrc_CVE-2024-47081 https://cve.radiocsirt.org/vuln/msrc_cve-2024-47081 https://cve.radiocsirt.org/vuln/oesa-2025-1674 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: python-requests, openEuler:24.03-LTS: python-requests, openEuler:24.03-LTS-SP1: python-requests, openEuler:20.03-LTS-SP4: python-requests, openEuler:22.03-LTS-SP3: python-requests</p> <p>Requests is an HTTP library, written in Python, as an alternative to Python&amp;amp;apos;s builtin urllib2 which requires work (even method overrides) to perform basic tasks. Features of Requests: - GET, HEAD, POST, PUT, DELETE Requests: + HTTP Header Request Attachment. + Data/Params Request Attachment. + Multipart File Uploads. + CookieJar Support. + Redirection History. + Redirection Recursion Urllib Fix. + Automatic Decompression of GZipped Content. + Unicode URL Support. - Authentication: + URL + HTTP Auth Registry. Security Fix(es):</p> <p>Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one&amp;apos;s Requests Session.(CVE-2024-47081)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: python-requests, openEuler:24.03-LTS: python-requests, openEuler:24.03-LTS-SP1: python-requests, openEuler:20.03-LTS-SP4: python-requests, openEuler:22.03-LTS-SP3: python-requests</p> <p>Requests is an HTTP library, written in Python, as an alternative to Python&amp;amp;apos;s builtin urllib2 which requires work (even method overrides) to perform basic tasks. Features of Requests: - GET, HEAD, POST, PUT, DELETE Requests: + HTTP Header Request Attachment. + Data/Params Request Attachment. + Multipart File Uploads. + CookieJar Support. + Redirection History. + Redirection Recursion Urllib Fix. + Automatic Decompression of GZipped Content. + Unicode URL Support. - Authentication: + URL + HTTP Auth Registry. Security Fix(es):</p> <p>Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one&amp;apos;s Requests Session.(CVE-2024-47081)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1674 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15281-1 <p>python311-requests-2.32.4-1.1 on GA media</p> <p>python311-requests-2.32.4-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15281-1 https://cve.radiocsirt.org/vuln/pysec-2026-1872 <p><strong>Affected:</strong> PyPI: requests</p> <p>### Impact</p> <p>Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs.</p> <p>### Workarounds For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on your Requests Session ([docs](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)).</p> <p>### References https://github.com/psf/requests/pull/6965 https://seclists.org/fulldisclosure/2025/Jun/2</p> <p><strong>Affected:</strong> PyPI: requests</p> <p>### Impact</p> <p>Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs.</p> <p>### Workarounds For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on your Requests Session ([docs](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)).</p> <p>### References https://github.com/psf/requests/pull/6965 https://seclists.org/fulldisclosure/2025/Jun/2</p> https://cve.radiocsirt.org/vuln/pysec-2026-1872 https://cve.radiocsirt.org/vuln/rhsa-2025:15121 <p>requests: Requests vulnerable to .netrc credentials leak via malicious URLs</p> <p>requests: Requests vulnerable to .netrc credentials leak via malicious URLs</p> https://cve.radiocsirt.org/vuln/rhsa-2025:15121 https://cve.radiocsirt.org/vuln/suse-su-2025:01997-1 <p>Security update for python3-requests</p> <p>Security update for python3-requests</p> https://cve.radiocsirt.org/vuln/suse-su-2025:01997-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-47081 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: requests, Ubuntu:Pro:16.04:LTS: requests, Ubuntu:Pro:18.04:LTS: requests, Ubuntu:Pro:20.04:LTS: requests, Ubuntu:22.04:LTS: python-pip, Ubuntu:22.04:LTS: requests, Ubuntu:24.04:LTS: python-pip, Ubuntu:24.04:LTS: requests, Ubuntu:25.10: requests</p> <p>Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one&#39;s Requests Session.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: requests, Ubuntu:Pro:16.04:LTS: requests, Ubuntu:Pro:18.04:LTS: requests, Ubuntu:Pro:20.04:LTS: requests, Ubuntu:22.04:LTS: python-pip, Ubuntu:22.04:LTS: requests, Ubuntu:24.04:LTS: python-pip, Ubuntu:24.04:LTS: requests, Ubuntu:25.10: requests</p> <p>Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one&#39;s Requests Session.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-47081 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1699 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (requests) ausnutzen, um Informationen auszuspähen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (requests) ausnutzen, um Informationen auszuspähen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1699