Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fence-agents-rsbUpgrade fence-agents-virshUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-emersonUpgrade fence-agents-kdumpUpgrade fence-agents-bladecenterUpgrade fence-agents-cisco-mdsUpgrade fence-agents-vmware-soapUpgrade resource-agents-gcpUpgrade python3-requests+socksUpgrade fence-agents-hpbladeUpgrade fence-agents-apcUpgrade fence-agents-ilo2Upgrade fence-agents-mpathUpgrade fence-agents-redfishUpgrade fence-agents-drac5Upgrade fence-agents-epsUpgrade fence-agents-rsaUpgrade fence-agents-allUpgrade fence-agents-zvmUpgrade fence-agents-ibm-vpcUpgrade fence-agents-ilo-mpUpgrade fence-agents-vmware-restUpgrade fence-agents-commonUpgrade python3-requests+securityUpgrade fence-agents-computeUpgrade fence-agents-brocadeUpgrade fence-agents-apc-snmpUpgrade fence-agents-lparUpgrade resource-agentsUpgrade fence-agents-sbdUpgrade fence-agents-intelmodularUpgrade fence-agents-ipduUpgrade fence-agents-scsiUpgrade fence-agents-rhevmUpgrade fence-agents-heuristics-pingUpgrade fence-agents-eaton-snmpUpgrade fence-agents-wtiUpgrade python3-requestsUpgrade fence-agents-ifmibUpgrade fence-agents-ibmbladeUpgrade resource-agents-pafUpgrade fence-agents-kubevirtUpgrade fence-agents-amt-wsUpgrade fence-agents-ilo-sshUpgrade fence-agents-cisco-ucsUpgrade fence-agents-ibm-powervsUpgrade fence-agents-ipmilanUpgrade resource-agents-aliyun | Aug 5, 2025 | Aug 4, 2025 |
| Alpine Linux | — | Upgrade py3-requests | Aug 8, 2025 | Jun 9, 2025 |
| Amazon Linux Ami 2 | — | Upgrade python3-pipUpgrade aws-cfn-bootstrapUpgrade python2-pipUpgrade python-pip-wheelUpgrade python3-requestsUpgrade python-requests | Jun 25, 2025 | Jun 9, 2025 |
| Debian | — | No solution existsUpgrade requests | Jun 5, 2025 | Jun 5, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-requests | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-requestsUpgrade python-requests-help | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-pipUpgrade python-pip-wheel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-requests | Sep 25, 2025 | Sep 9, 2025 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory17 | Nov 20, 2025 | Nov 19, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade fence-agents-wtiUpgrade fence-agents-ilo-mpUpgrade fence-agents-vmware-restUpgrade fence-agents-allUpgrade fence-agents-intelmodularUpgrade python3-requestsUpgrade fence-agents-cisco-mdsUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-ifmibUpgrade fence-agents-apcUpgrade fence-agents-scsiUpgrade fence-agents-ipduUpgrade fence-agents-ipmilanUpgrade fence-agents-hpbladeUpgrade fence-agents-bladecenterUpgrade fence-agents-redfishUpgrade fence-agents-mpathUpgrade fence-agents-lparUpgrade fence-agents-vmware-soapUpgrade fence-agents-sbdUpgrade fence-agents-ibmbladeUpgrade fence-agents-heuristics-pingUpgrade fence-agents-epsUpgrade fence-agents-rsbUpgrade fence-agents-eaton-snmpUpgrade fence-agents-brocadeUpgrade python3-requests+socksUpgrade fence-agents-virshUpgrade fence-agents-kubevirtUpgrade fence-agents-commonUpgrade fence-agents-apc-snmpUpgrade python3-requests+securityUpgrade fence-agents-ibm-vpcUpgrade fence-agents-ibm-powervsUpgrade fence-agents-computeUpgrade fence-agents-rsaUpgrade fence-agents-drac5Upgrade fence-agents-kdumpUpgrade fence-agents-ilo-sshUpgrade fence-agents-rhevmUpgrade resource-agentsUpgrade fence-agents-ilo2Upgrade fence-agents-amt-wsUpgrade fence-agents-cisco-ucsUpgrade fence-agents-emerson | Aug 5, 2025 | Jun 9, 2025 |
| Redhat_linux | — | Upgrade fence-agents-heuristics-pingUpgrade python3-requestsUpgrade fence-agents-kubevirtUpgrade fence-agents-wtiUpgrade fence-agents-bladecenterUpgrade fence-agents-ipmilanUpgrade fence-agents-debuginfoUpgrade fence-agents-intelmodularUpgrade fence-agents-lparUpgrade fence-agents-rsaUpgrade fence-agents-gceNo solution existsUpgrade fence-agents-kdump-debuginfoUpgrade fence-agents-apcUpgrade fence-agents-debugsourceUpgrade resource-agents-debuginfoUpgrade resource-agents-aliyunUpgrade fence-agents-drac5Upgrade fence-agents-awsUpgrade fence-agents-redfishUpgrade fence-agents-aliyunUpgrade resource-agents-aliyun-debuginfoUpgrade python3-requests+securityUpgrade fence-agents-azure-arm-debuginfoUpgrade fence-agents-ibmbladeUpgrade fence-agents-scsiUpgrade resource-agents-debugsourceUpgrade fence-agents-ilo2Upgrade fence-agents-emersonUpgrade fence-agents-vmware-soapUpgrade resource-agents-pafUpgrade fence-agents-rhevmUpgrade fence-agents-allUpgrade fence-agents-kdumpUpgrade fence-agents-vmware-restUpgrade fence-agents-rsbUpgrade fence-agents-ibm-vpcUpgrade python3-requests+socksUpgrade fence-agents-aliyun-debuginfoUpgrade fence-agents-sbdUpgrade fence-agents-cisco-ucsUpgrade fence-agents-eaton-snmpUpgrade fence-agents-commonUpgrade fence-agents-cisco-mdsUpgrade fence-agents-ilo-mpUpgrade fence-agents-computeUpgrade fence-agents-openstackUpgrade fence-agents-brocadeUpgrade fence-agents-azure-armUpgrade fence-agents-hpbladeUpgrade fence-agents-zvmUpgrade fence-agents-ipduUpgrade fence-agents-ibm-powervsUpgrade resource-agentsUpgrade fence-agents-ifmibUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-amt-wsUpgrade fence-agents-apc-snmpUpgrade fence-agents-virshUpgrade resource-agents-gcpUpgrade fence-agents-mpathUpgrade fence-agents-ilo-sshUpgrade fence-agents-eps | Jul 9, 2025 | Jun 9, 2025 |
| Rocky_linux | — | Upgrade fence-agents-debugsourceUpgrade resource-agents-pafUpgrade fence-agents-kubevirtUpgrade fence-agents-debuginfoUpgrade resource-agents-debuginfoUpgrade fence-agents-openstackUpgrade resource-agentsUpgrade fence-agents-kubevirt-debuginfoUpgrade resource-agents-aliyunUpgrade fence-agents-aliyun-debuginfoUpgrade fence-agents-kdumpUpgrade fence-agents-kdump-debuginfoUpgrade resource-agents-debugsourceUpgrade fence-agents-azure-arm-debuginfoUpgrade fence-agents-allUpgrade fence-agents-redfishUpgrade resource-agents-aliyun-debuginfoUpgrade fence-agents-azure-armUpgrade fence-agents-aliyunUpgrade resource-agents-gcp | Feb 5, 2026 | Sep 8, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 10.2.1 | Mar 20, 2026 | Jun 9, 2025 |
| Suse | — | Upgrade python313-requestsUpgrade python-requestsUpgrade python3-requestsUpgrade python311-requests | Dec 5, 2025 | Aug 4, 2025 |
| Ubuntu | — | Upgrade python3-pip-whlUpgrade python3-requests (Ubuntu Pro)Upgrade python3-pipUpgrade python-requests (Ubuntu Pro)Upgrade python-requests-whl (Ubuntu Pro)Upgrade python3-requests | Jun 17, 2025 | Jun 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Jun 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub