Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fence-agents-redfishUpgrade fence-agents-ilo-moonshotUpgrade python3-requests+securityUpgrade resource-agents-gcpUpgrade fence-agents-virshUpgrade python3-requests+socksUpgrade fence-agents-ilo-mpUpgrade fence-agents-mpathUpgrade fence-agents-vmware-restUpgrade fence-agents-zvmUpgrade fence-agents-drac5Upgrade fence-agents-vmware-soapUpgrade fence-agents-ibm-vpcUpgrade fence-agents-commonUpgrade fence-agents-kdumpUpgrade fence-agents-rsaUpgrade fence-agents-epsUpgrade fence-agents-cisco-mdsUpgrade fence-agents-ilo2Upgrade fence-agents-hpbladeUpgrade fence-agents-emersonUpgrade fence-agents-bladecenterUpgrade fence-agents-rsbUpgrade fence-agents-allUpgrade fence-agents-apcUpgrade fence-agents-rhevmUpgrade fence-agents-cisco-ucsUpgrade fence-agents-heuristics-pingUpgrade fence-agents-ibm-powervsUpgrade fence-agents-computeUpgrade fence-agents-amt-wsUpgrade fence-agents-ipmilanUpgrade fence-agents-ilo-sshUpgrade resource-agentsUpgrade resource-agents-pafUpgrade fence-agents-ibmbladeUpgrade fence-agents-ipduUpgrade fence-agents-apc-snmpUpgrade fence-agents-intelmodularUpgrade fence-agents-wtiUpgrade fence-agents-kubevirtUpgrade fence-agents-lparUpgrade python3-requestsUpgrade fence-agents-sbdUpgrade fence-agents-ifmibUpgrade resource-agents-aliyunUpgrade fence-agents-brocadeUpgrade fence-agents-eaton-snmpUpgrade fence-agents-scsi | Aug 5, 2025 | Aug 4, 2025 |
| Alpine Linux | — | Upgrade py3-requests | Aug 8, 2025 | Jun 9, 2025 |
| Amazon Linux Ami 2 | — | Upgrade python3-pipUpgrade python2-pipUpgrade python3-requestsUpgrade aws-cfn-bootstrapUpgrade python-requestsUpgrade python-pip-wheel | Jun 25, 2025 | Jun 9, 2025 |
| Debian | — | Upgrade requests | Jun 5, 2025 | Jun 5, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-requests | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python-requests-helpUpgrade python3-requests | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-pipUpgrade python-pip-wheel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-requests | Sep 25, 2025 | Sep 9, 2025 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory17 | Nov 20, 2025 | Nov 19, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade fence-agents-ilo-moonshotUpgrade fence-agents-vmware-restUpgrade fence-agents-ifmibUpgrade fence-agents-apcUpgrade fence-agents-cisco-mdsUpgrade python3-requestsUpgrade fence-agents-ilo-mpUpgrade fence-agents-allUpgrade fence-agents-vmware-soapUpgrade fence-agents-bladecenterUpgrade fence-agents-wtiUpgrade fence-agents-hpbladeUpgrade fence-agents-mpathUpgrade fence-agents-lparUpgrade fence-agents-redfishUpgrade fence-agents-intelmodularUpgrade fence-agents-scsiUpgrade fence-agents-ipduUpgrade fence-agents-ipmilanUpgrade fence-agents-sbdUpgrade fence-agents-amt-wsUpgrade fence-agents-cisco-ucsUpgrade fence-agents-kdumpUpgrade fence-agents-ibmbladeUpgrade fence-agents-eaton-snmpUpgrade fence-agents-ibm-vpcUpgrade fence-agents-computeUpgrade fence-agents-drac5Upgrade python3-requests+securityUpgrade fence-agents-ibm-powervsUpgrade fence-agents-rsaUpgrade fence-agents-rsbUpgrade fence-agents-ilo-sshUpgrade fence-agents-rhevmUpgrade fence-agents-epsUpgrade fence-agents-heuristics-pingUpgrade resource-agentsUpgrade fence-agents-ilo2Upgrade fence-agents-emersonUpgrade python3-requests+socksUpgrade fence-agents-commonUpgrade fence-agents-brocadeUpgrade fence-agents-apc-snmpUpgrade fence-agents-virshUpgrade fence-agents-kubevirt | Aug 5, 2025 | Jun 9, 2025 |
| Redhat_linux | — | Upgrade resource-agents-debugsourceUpgrade fence-agents-drac5Upgrade python3-requestsUpgrade resource-agents-debuginfoUpgrade fence-agents-debugsourceUpgrade fence-agents-scsiUpgrade fence-agents-heuristics-pingUpgrade fence-agents-ilo2Upgrade fence-agents-intelmodularNo solution existsUpgrade fence-agents-gceUpgrade fence-agents-debuginfoUpgrade python3-requests+securityUpgrade fence-agents-ipmilanUpgrade fence-agents-ibmbladeUpgrade fence-agents-apcUpgrade fence-agents-kdump-debuginfoUpgrade fence-agents-redfishUpgrade fence-agents-wtiUpgrade fence-agents-lparUpgrade fence-agents-rsaUpgrade fence-agents-kubevirtUpgrade fence-agents-bladecenterUpgrade fence-agents-aliyunUpgrade fence-agents-azure-arm-debuginfoUpgrade resource-agents-aliyunUpgrade fence-agents-awsUpgrade resource-agents-aliyun-debuginfoUpgrade fence-agents-mpathUpgrade fence-agents-allUpgrade resource-agents-gcpUpgrade fence-agents-apc-snmpUpgrade fence-agents-ifmibUpgrade fence-agents-vmware-restUpgrade fence-agents-ipduUpgrade resource-agentsUpgrade fence-agents-kdumpUpgrade fence-agents-cisco-mdsUpgrade fence-agents-eaton-snmpUpgrade fence-agents-cisco-ucsUpgrade fence-agents-amt-wsUpgrade fence-agents-epsUpgrade fence-agents-emersonUpgrade fence-agents-virshUpgrade fence-agents-ilo-sshUpgrade fence-agents-aliyun-debuginfoUpgrade fence-agents-rsbUpgrade fence-agents-ibm-vpcUpgrade python3-requests+socksUpgrade fence-agents-ilo-mpUpgrade fence-agents-commonUpgrade fence-agents-sbdUpgrade fence-agents-rhevmUpgrade resource-agents-pafUpgrade fence-agents-hpbladeUpgrade fence-agents-azure-armUpgrade fence-agents-vmware-soapUpgrade fence-agents-zvmUpgrade fence-agents-openstackUpgrade fence-agents-brocadeUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-computeUpgrade fence-agents-ibm-powervs | Jul 9, 2025 | Jun 9, 2025 |
| Rocky_linux | — | Upgrade fence-agents-debuginfoUpgrade resource-agents-debuginfoUpgrade fence-agents-kubevirtUpgrade resource-agents-pafUpgrade resource-agentsUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-debugsourceUpgrade fence-agents-aliyun-debuginfoUpgrade resource-agents-aliyunUpgrade fence-agents-openstackUpgrade fence-agents-allUpgrade fence-agents-aliyunUpgrade resource-agents-debugsourceUpgrade resource-agents-gcpUpgrade fence-agents-kdumpUpgrade fence-agents-azure-armUpgrade fence-agents-kdump-debuginfoUpgrade resource-agents-aliyun-debuginfoUpgrade fence-agents-azure-arm-debuginfoUpgrade fence-agents-redfish | Feb 5, 2026 | Sep 8, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 9.3.10 | Mar 20, 2026 | Jun 9, 2025 |
| Suse | — | Upgrade python313-requestsUpgrade python-requestsUpgrade python3-requestsUpgrade python311-requests | Dec 5, 2025 | Aug 4, 2025 |
| Ubuntu | — | Upgrade python3-requests (Ubuntu Pro)Upgrade python3-pip-whlUpgrade python-requests-whl (Ubuntu Pro)Upgrade python3-requestsUpgrade python3-pipUpgrade python-requests (Ubuntu Pro) | Jun 17, 2025 | Jun 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Jun 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub