Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade resource-agents-gcpUpgrade fence-agents-bladecenterUpgrade fence-agents-cisco-mdsUpgrade fence-agents-mpathUpgrade fence-agents-vmware-restUpgrade fence-agents-drac5Upgrade fence-agents-vmware-soapUpgrade fence-agents-virshUpgrade fence-agents-rsbUpgrade fence-agents-epsUpgrade fence-agents-zvmUpgrade fence-agents-ilo-mpUpgrade fence-agents-apcUpgrade fence-agents-commonUpgrade fence-agents-emersonUpgrade fence-agents-redfishUpgrade python3-requests+socksUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-kdumpUpgrade fence-agents-allUpgrade python3-requests+securityUpgrade fence-agents-hpbladeUpgrade fence-agents-ilo2Upgrade fence-agents-rsaUpgrade fence-agents-ibm-vpcUpgrade fence-agents-kubevirtUpgrade fence-agents-sbdUpgrade fence-agents-wtiUpgrade resource-agents-aliyunUpgrade fence-agents-lparUpgrade fence-agents-ifmibUpgrade fence-agents-cisco-ucsUpgrade python3-requestsUpgrade fence-agents-intelmodularUpgrade fence-agents-rhevmUpgrade fence-agents-ibm-powervsUpgrade fence-agents-apc-snmpUpgrade fence-agents-eaton-snmpUpgrade fence-agents-ipmilanUpgrade fence-agents-brocadeUpgrade resource-agents-pafUpgrade fence-agents-computeUpgrade resource-agentsUpgrade fence-agents-scsiUpgrade fence-agents-heuristics-pingUpgrade fence-agents-ipduUpgrade fence-agents-ilo-sshUpgrade fence-agents-ibmbladeUpgrade fence-agents-amt-ws | Aug 5, 2025 | Aug 4, 2025 |
| Alpine Linux | — | Upgrade py3-requests | Aug 8, 2025 | Jun 9, 2025 |
| Amazon Linux Ami 2 | — | Upgrade python3-pipUpgrade python3-requestsUpgrade python-requestsUpgrade aws-cfn-bootstrapUpgrade python2-pipUpgrade python-pip-wheel | Jun 25, 2025 | Jun 9, 2025 |
| Debian | — | Upgrade requestsNo solution exists | Jun 5, 2025 | Jun 5, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-requests | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-requestsUpgrade python-requests-help | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-pipUpgrade python-pip-wheel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-requests | Sep 25, 2025 | Sep 9, 2025 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory17 | Nov 20, 2025 | Nov 19, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade fence-agents-commonUpgrade fence-agents-eaton-snmpUpgrade fence-agents-brocadeUpgrade fence-agents-kubevirtUpgrade fence-agents-rsbUpgrade fence-agents-heuristics-pingUpgrade fence-agents-apc-snmpUpgrade fence-agents-virshUpgrade fence-agents-rsaUpgrade fence-agents-ibm-vpcUpgrade fence-agents-computeUpgrade python3-requests+securityUpgrade fence-agents-cisco-ucsUpgrade fence-agents-amt-wsUpgrade fence-agents-drac5Upgrade python3-requests+socksUpgrade fence-agents-rhevmUpgrade fence-agents-ibmbladeUpgrade fence-agents-epsUpgrade fence-agents-sbdUpgrade fence-agents-ilo2Upgrade resource-agentsUpgrade fence-agents-ilo-sshUpgrade fence-agents-emersonUpgrade fence-agents-ibm-powervsUpgrade fence-agents-kdumpUpgrade fence-agents-ipmilanUpgrade python3-requestsUpgrade fence-agents-mpathUpgrade fence-agents-vmware-soapUpgrade fence-agents-redfishUpgrade fence-agents-bladecenterUpgrade fence-agents-vmware-restUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-ifmibUpgrade fence-agents-ipduUpgrade fence-agents-intelmodularUpgrade fence-agents-cisco-mdsUpgrade fence-agents-scsiUpgrade fence-agents-allUpgrade fence-agents-ilo-mpUpgrade fence-agents-apcUpgrade fence-agents-lparUpgrade fence-agents-wtiUpgrade fence-agents-hpblade | Aug 5, 2025 | Jun 9, 2025 |
| Redhat_linux | — | Upgrade fence-agents-wtiUpgrade fence-agents-rsaUpgrade fence-agents-awsUpgrade fence-agents-heuristics-pingUpgrade fence-agents-kubevirtUpgrade fence-agents-redfishUpgrade resource-agents-aliyunUpgrade fence-agents-apcUpgrade fence-agents-bladecenterUpgrade fence-agents-lparUpgrade fence-agents-kdump-debuginfoUpgrade fence-agents-scsiUpgrade resource-agents-debugsourceUpgrade fence-agents-debugsourceUpgrade resource-agents-debuginfoUpgrade fence-agents-ilo2Upgrade fence-agents-aliyunUpgrade fence-agents-drac5Upgrade resource-agents-aliyun-debuginfoUpgrade fence-agents-ipmilanUpgrade fence-agents-gceUpgrade fence-agents-ibmbladeUpgrade python3-requests+securityNo solution existsUpgrade python3-requestsUpgrade fence-agents-azure-arm-debuginfoUpgrade fence-agents-intelmodularUpgrade fence-agents-debuginfoUpgrade python3-requests+socksUpgrade fence-agents-ibm-vpcUpgrade fence-agents-vmware-restUpgrade resource-agentsUpgrade fence-agents-ipduUpgrade fence-agents-cisco-mdsUpgrade fence-agents-allUpgrade fence-agents-mpathUpgrade fence-agents-rsbUpgrade fence-agents-ibm-powervsUpgrade fence-agents-computeUpgrade fence-agents-apc-snmpUpgrade fence-agents-ilo-sshUpgrade resource-agents-gcpUpgrade fence-agents-virshUpgrade fence-agents-amt-wsUpgrade fence-agents-epsUpgrade fence-agents-emersonUpgrade fence-agents-kdumpUpgrade fence-agents-ifmibUpgrade fence-agents-aliyun-debuginfoUpgrade fence-agents-sbdUpgrade fence-agents-ilo-mpUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-commonUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-azure-armUpgrade fence-agents-brocadeUpgrade resource-agents-pafUpgrade fence-agents-vmware-soapUpgrade fence-agents-rhevmUpgrade fence-agents-openstackUpgrade fence-agents-hpbladeUpgrade fence-agents-cisco-ucsUpgrade fence-agents-zvmUpgrade fence-agents-eaton-snmp | Jul 9, 2025 | Jun 9, 2025 |
| Rocky_linux | — | Upgrade fence-agents-allUpgrade fence-agents-kdumpUpgrade fence-agents-kdump-debuginfoUpgrade resource-agents-debugsourceUpgrade fence-agents-azure-armUpgrade resource-agents-aliyun-debuginfoUpgrade fence-agents-redfishUpgrade fence-agents-aliyunUpgrade resource-agents-gcpUpgrade fence-agents-azure-arm-debuginfoUpgrade fence-agents-kubevirtUpgrade fence-agents-debugsourceUpgrade fence-agents-aliyun-debuginfoUpgrade resource-agents-aliyunUpgrade fence-agents-openstackUpgrade resource-agents-debuginfoUpgrade fence-agents-debuginfoUpgrade fence-agents-kubevirt-debuginfoUpgrade resource-agents-pafUpgrade resource-agents | Feb 5, 2026 | Sep 8, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 9.3.10 | Mar 20, 2026 | Jun 9, 2025 |
| Suse | — | Upgrade python313-requestsUpgrade python311-requestsUpgrade python3-requestsUpgrade python-requests | Dec 5, 2025 | Aug 4, 2025 |
| Ubuntu | — | Upgrade python-requests-whl (Ubuntu Pro)Upgrade python3-pipUpgrade python3-requestsUpgrade python-requests (Ubuntu Pro)Upgrade python3-pip-whlUpgrade python3-requests (Ubuntu Pro) | Jun 17, 2025 | Jun 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Jun 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub