Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fence-agents-rsaUpgrade fence-agents-ilo2Upgrade fence-agents-ilo-moonshotUpgrade fence-agents-vmware-soapUpgrade fence-agents-hpbladeUpgrade fence-agents-zvmUpgrade fence-agents-emersonUpgrade resource-agents-gcpUpgrade fence-agents-kdumpUpgrade fence-agents-ibm-vpcUpgrade python3-requests+securityUpgrade fence-agents-bladecenterUpgrade fence-agents-cisco-mdsUpgrade fence-agents-mpathUpgrade fence-agents-drac5Upgrade fence-agents-epsUpgrade fence-agents-apcUpgrade fence-agents-commonUpgrade fence-agents-ilo-mpUpgrade fence-agents-vmware-restUpgrade fence-agents-rsbUpgrade python3-requests+socksUpgrade fence-agents-allUpgrade fence-agents-redfishUpgrade fence-agents-virshUpgrade fence-agents-ibm-powervsUpgrade resource-agentsUpgrade fence-agents-wtiUpgrade fence-agents-eaton-snmpUpgrade fence-agents-apc-snmpUpgrade fence-agents-ipduUpgrade fence-agents-cisco-ucsUpgrade fence-agents-ifmibUpgrade fence-agents-heuristics-pingUpgrade fence-agents-lparUpgrade resource-agents-pafUpgrade fence-agents-kubevirtUpgrade fence-agents-ipmilanUpgrade fence-agents-amt-wsUpgrade fence-agents-ilo-sshUpgrade fence-agents-rhevmUpgrade fence-agents-scsiUpgrade fence-agents-brocadeUpgrade fence-agents-sbdUpgrade fence-agents-intelmodularUpgrade fence-agents-computeUpgrade python3-requestsUpgrade resource-agents-aliyunUpgrade fence-agents-ibmblade | Aug 5, 2025 | Aug 4, 2025 |
| Alpine Linux | — | Upgrade py3-requests | Aug 8, 2025 | Jun 9, 2025 |
| Amazon Linux Ami 2 | — | Upgrade python-requestsUpgrade python3-requestsUpgrade aws-cfn-bootstrapUpgrade python2-pipUpgrade python-pip-wheelUpgrade python3-pip | Jun 25, 2025 | Jun 9, 2025 |
| Debian | — | Upgrade requests | Jun 5, 2025 | Jun 5, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-requests | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-requestsUpgrade python-requests-help | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-pipUpgrade python-pip-wheel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-requests | Sep 25, 2025 | Sep 9, 2025 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory17 | Nov 20, 2025 | Nov 19, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade fence-agents-virshUpgrade fence-agents-heuristics-pingUpgrade python3-requests+socksUpgrade fence-agents-apc-snmpUpgrade fence-agents-ibm-vpcUpgrade fence-agents-epsUpgrade python3-requests+securityUpgrade fence-agents-rsaUpgrade fence-agents-ibm-powervsUpgrade fence-agents-computeUpgrade fence-agents-sbdUpgrade fence-agents-kdumpUpgrade fence-agents-ilo-sshUpgrade fence-agents-ibmbladeUpgrade fence-agents-drac5Upgrade fence-agents-rsbUpgrade fence-agents-ilo2Upgrade resource-agentsUpgrade fence-agents-emersonUpgrade fence-agents-rhevmUpgrade fence-agents-cisco-ucsUpgrade fence-agents-amt-wsUpgrade fence-agents-eaton-snmpUpgrade fence-agents-brocadeUpgrade fence-agents-kubevirtUpgrade fence-agents-commonUpgrade fence-agents-apcUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-allUpgrade fence-agents-ifmibUpgrade fence-agents-vmware-restUpgrade fence-agents-ilo-mpUpgrade fence-agents-cisco-mdsUpgrade fence-agents-intelmodularUpgrade fence-agents-scsiUpgrade python3-requestsUpgrade fence-agents-ipduUpgrade fence-agents-ipmilanUpgrade fence-agents-vmware-soapUpgrade fence-agents-redfishUpgrade fence-agents-bladecenterUpgrade fence-agents-hpbladeUpgrade fence-agents-wtiUpgrade fence-agents-lparUpgrade fence-agents-mpath | Aug 5, 2025 | Jun 9, 2025 |
| Redhat_linux | — | Upgrade python3-requests+securityUpgrade fence-agents-awsUpgrade fence-agents-azure-arm-debuginfoUpgrade fence-agents-rsaUpgrade resource-agents-aliyunUpgrade fence-agents-aliyunUpgrade fence-agents-drac5Upgrade resource-agents-aliyun-debuginfoUpgrade fence-agents-debuginfoUpgrade fence-agents-ipmilanUpgrade fence-agents-wtiUpgrade fence-agents-intelmodularUpgrade fence-agents-bladecenterUpgrade fence-agents-kdump-debuginfoUpgrade fence-agents-redfishNo solution existsUpgrade fence-agents-debugsourceUpgrade fence-agents-kubevirtUpgrade fence-agents-apcUpgrade fence-agents-ilo2Upgrade resource-agents-debugsourceUpgrade fence-agents-lparUpgrade resource-agents-debuginfoUpgrade fence-agents-gceUpgrade fence-agents-ibmbladeUpgrade fence-agents-heuristics-pingUpgrade fence-agents-scsiUpgrade python3-requestsUpgrade fence-agents-azure-armUpgrade fence-agents-vmware-soapUpgrade resource-agents-pafUpgrade fence-agents-rhevmUpgrade fence-agents-openstackUpgrade fence-agents-hpbladeUpgrade fence-agents-brocadeUpgrade fence-agents-epsUpgrade fence-agents-computeUpgrade fence-agents-cisco-ucsUpgrade fence-agents-kubevirt-debuginfoUpgrade python3-requests+socksUpgrade fence-agents-ibm-powervsUpgrade fence-agents-apc-snmpUpgrade fence-agents-rsbUpgrade fence-agents-ilo-sshUpgrade fence-agents-virshUpgrade resource-agents-gcpUpgrade fence-agents-amt-wsUpgrade fence-agents-emersonUpgrade fence-agents-mpathUpgrade fence-agents-commonUpgrade fence-agents-ilo-mpUpgrade fence-agents-eaton-snmpUpgrade fence-agents-ibm-vpcUpgrade fence-agents-sbdUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-aliyun-debuginfoUpgrade fence-agents-kdumpUpgrade fence-agents-cisco-mdsUpgrade fence-agents-ipduUpgrade fence-agents-ifmibUpgrade fence-agents-allUpgrade fence-agents-vmware-restUpgrade resource-agentsUpgrade fence-agents-zvm | Jul 9, 2025 | Jun 9, 2025 |
| Rocky_linux | — | Upgrade fence-agents-redfishUpgrade resource-agents-debugsourceUpgrade fence-agents-kdumpUpgrade resource-agents-aliyun-debuginfoUpgrade fence-agents-allUpgrade fence-agents-azure-armUpgrade fence-agents-aliyunUpgrade resource-agents-gcpUpgrade fence-agents-azure-arm-debuginfoUpgrade fence-agents-kdump-debuginfoUpgrade resource-agents-pafUpgrade fence-agents-debugsourceUpgrade resource-agents-debuginfoUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-openstackUpgrade fence-agents-aliyun-debuginfoUpgrade resource-agents-aliyunUpgrade resource-agentsUpgrade fence-agents-kubevirtUpgrade fence-agents-debuginfo | Feb 5, 2026 | Sep 8, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 9.4.9 | Mar 20, 2026 | Jun 9, 2025 |
| Suse | — | Upgrade python313-requestsUpgrade python-requestsUpgrade python311-requestsUpgrade python3-requests | Dec 5, 2025 | Aug 4, 2025 |
| Ubuntu | — | Upgrade python3-requests (Ubuntu Pro)Upgrade python3-pip-whlUpgrade python3-pipUpgrade python-requests (Ubuntu Pro)Upgrade python3-requestsUpgrade python-requests-whl (Ubuntu Pro) | Jun 17, 2025 | Jun 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Jun 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub