Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. This vulnerability is fixed in 2.32.0.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-python3-requestsalma-upgrade-python3-requests+securityalma-upgrade-python3-requests+socks | Jan 7, 2025 | May 20, 2024 | |
| Alpine Linux | alpine-linux-upgrade-py3-requests | Aug 22, 2024 | May 20, 2024 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-aws-cfn-bootstrapamazon-linux-ami-2-upgrade-python-pip-wheelamazon-linux-ami-2-upgrade-python-requestsamazon-linux-ami-2-upgrade-python2-pipamazon-linux-ami-2-upgrade-python3-pipamazon-linux-ami-2-upgrade-python3-requestsamazon-linux-ami-2-upgrade-python38-pip | Oct 17, 2024 | May 20, 2024 | |
| Debian | no-fix-debian-deb-package | May 15, 2025 | May 20, 2024 | |
| Dell Powerstore Dsa2025086 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Feb 20, 2025 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-python3-requests | Mar 10, 2026 | Mar 10, 2026 | |
| Oracle_linux | — | oracle-linux-upgrade-python3-requestsoracle-linux-upgrade-python3-requests-securityoracle-linux-upgrade-python3-requests-socks | Jan 3, 2025 | May 20, 2024 |
| Redhat_linux | redhat-upgrade-python3-requestsredhat-upgrade-python3-requests-securityredhat-upgrade-python3-requests-socks | Jan 6, 2025 | May 20, 2024 | |
| Splunk | splunk-upgrade-latest | Sep 30, 2025 | May 20, 2024 | |
| Suse | — | suse-upgrade-python-requestssuse-upgrade-python3-dockersuse-upgrade-python3-requestssuse-upgrade-python311-dockersuse-upgrade-python311-requestssuse-upgrade-python313-requests | May 31, 2024 | May 20, 2024 |
| Ubuntu | ubuntu-pro-upgrade-python3-pipubuntu-pro-upgrade-python3-pip-whl | Nov 19, 2024 | May 20, 2024 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub