Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fence-agents-vmware-restUpgrade fence-agents-vmware-soapUpgrade fence-agents-kdumpUpgrade fence-agents-ilo-mpUpgrade fence-agents-commonUpgrade resource-agents-gcpUpgrade python3-requests+socksUpgrade python3-requests+securityUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-hpbladeUpgrade fence-agents-ilo2Upgrade fence-agents-virshUpgrade fence-agents-allUpgrade fence-agents-ibm-vpcUpgrade fence-agents-drac5Upgrade fence-agents-zvmUpgrade fence-agents-rsaUpgrade fence-agents-mpathUpgrade fence-agents-epsUpgrade fence-agents-cisco-mdsUpgrade fence-agents-redfishUpgrade fence-agents-bladecenterUpgrade fence-agents-rsbUpgrade fence-agents-apcUpgrade fence-agents-emersonUpgrade fence-agents-rhevmUpgrade resource-agents-pafUpgrade fence-agents-scsiUpgrade resource-agentsUpgrade fence-agents-wtiUpgrade fence-agents-sbdUpgrade fence-agents-ifmibUpgrade fence-agents-lparUpgrade python3-requestsUpgrade resource-agents-aliyunUpgrade fence-agents-amt-wsUpgrade fence-agents-ipmilanUpgrade fence-agents-brocadeUpgrade fence-agents-apc-snmpUpgrade fence-agents-kubevirtUpgrade fence-agents-computeUpgrade fence-agents-ibmbladeUpgrade fence-agents-ibm-powervsUpgrade fence-agents-ilo-sshUpgrade fence-agents-eaton-snmpUpgrade fence-agents-heuristics-pingUpgrade fence-agents-intelmodularUpgrade fence-agents-cisco-ucsUpgrade fence-agents-ipdu | Aug 5, 2025 | Aug 4, 2025 |
| Alpine Linux | — | Upgrade py3-requests | Aug 8, 2025 | Jun 9, 2025 |
| Amazon Linux Ami 2 | — | Upgrade python3-pipUpgrade python-requestsUpgrade aws-cfn-bootstrapUpgrade python-pip-wheelUpgrade python2-pipUpgrade python3-requests | Jun 25, 2025 | Jun 9, 2025 |
| Debian | — | Upgrade requestsNo solution exists | Jun 5, 2025 | Jun 5, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-requests | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python-requests-helpUpgrade python3-requests | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-pipUpgrade python-pip-wheel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-requests | Sep 25, 2025 | Sep 9, 2025 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory17 | Nov 20, 2025 | Nov 19, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade fence-agents-mpathUpgrade python3-requestsUpgrade fence-agents-scsiUpgrade fence-agents-intelmodularUpgrade fence-agents-cisco-mdsUpgrade fence-agents-wtiUpgrade fence-agents-ilo-mpUpgrade fence-agents-ibm-powervsUpgrade fence-agents-heuristics-pingUpgrade fence-agents-sbdUpgrade fence-agents-drac5Upgrade fence-agents-ibm-vpcUpgrade fence-agents-ilo-sshUpgrade fence-agents-rsbUpgrade fence-agents-kdumpUpgrade fence-agents-ibmbladeUpgrade fence-agents-commonUpgrade fence-agents-apc-snmpUpgrade python3-requests+socksUpgrade fence-agents-virshUpgrade fence-agents-kubevirtUpgrade fence-agents-eaton-snmpUpgrade fence-agents-brocadeUpgrade fence-agents-amt-wsUpgrade fence-agents-cisco-ucsUpgrade fence-agents-rhevmUpgrade fence-agents-emersonUpgrade resource-agentsUpgrade fence-agents-ilo2Upgrade fence-agents-computeUpgrade fence-agents-epsUpgrade python3-requests+securityUpgrade fence-agents-rsaUpgrade fence-agents-apcUpgrade fence-agents-ifmibUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-lparUpgrade fence-agents-ipmilanUpgrade fence-agents-vmware-soapUpgrade fence-agents-ipduUpgrade fence-agents-bladecenterUpgrade fence-agents-vmware-restUpgrade fence-agents-hpbladeUpgrade fence-agents-redfishUpgrade fence-agents-all | Aug 5, 2025 | Jun 9, 2025 |
| Redhat_linux | — | Upgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-zvmUpgrade resource-agents-pafUpgrade fence-agents-hpbladeUpgrade fence-agents-cisco-ucsUpgrade fence-agents-emersonUpgrade fence-agents-epsUpgrade fence-agents-apc-snmpUpgrade fence-agents-mpathUpgrade fence-agents-openstackUpgrade fence-agents-computeUpgrade fence-agents-ibm-powervsUpgrade fence-agents-virshUpgrade fence-agents-allUpgrade fence-agents-commonUpgrade fence-agents-eaton-snmpUpgrade fence-agents-vmware-restUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-ilo-mpUpgrade fence-agents-vmware-soapUpgrade resource-agents-gcpUpgrade fence-agents-ipduUpgrade fence-agents-kdumpUpgrade fence-agents-brocadeUpgrade resource-agentsUpgrade fence-agents-aliyun-debuginfoUpgrade fence-agents-cisco-mdsUpgrade fence-agents-azure-armUpgrade fence-agents-ibm-vpcUpgrade python3-requests+socksUpgrade fence-agents-sbdUpgrade fence-agents-rsbUpgrade fence-agents-ilo-sshUpgrade fence-agents-amt-wsUpgrade fence-agents-ifmibUpgrade fence-agents-rhevmUpgrade resource-agents-aliyunUpgrade fence-agents-wtiUpgrade fence-agents-azure-arm-debuginfoUpgrade fence-agents-ipmilanUpgrade fence-agents-kubevirtUpgrade fence-agents-rsaUpgrade fence-agents-lparUpgrade fence-agents-redfishUpgrade fence-agents-bladecenterUpgrade fence-agents-kdump-debuginfoUpgrade fence-agents-drac5Upgrade resource-agents-debuginfoUpgrade fence-agents-ilo2Upgrade fence-agents-debuginfoUpgrade fence-agents-intelmodularNo solution existsUpgrade fence-agents-ibmbladeUpgrade fence-agents-gceUpgrade resource-agents-debugsourceUpgrade fence-agents-scsiUpgrade fence-agents-debugsourceUpgrade fence-agents-heuristics-pingUpgrade fence-agents-apcUpgrade python3-requestsUpgrade fence-agents-awsUpgrade python3-requests+securityUpgrade resource-agents-aliyun-debuginfoUpgrade fence-agents-aliyun | Jul 9, 2025 | Jun 9, 2025 |
| Rocky_linux | — | Upgrade fence-agents-allUpgrade fence-agents-kdump-debuginfoUpgrade fence-agents-kdumpUpgrade fence-agents-azure-arm-debuginfoUpgrade resource-agents-debugsourceUpgrade fence-agents-redfishUpgrade fence-agents-azure-armUpgrade resource-agents-aliyun-debuginfoUpgrade fence-agents-aliyunUpgrade resource-agents-gcpUpgrade resource-agents-debuginfoUpgrade fence-agents-aliyun-debuginfoUpgrade fence-agents-debuginfoUpgrade fence-agents-kubevirt-debuginfoUpgrade resource-agentsUpgrade fence-agents-kubevirtUpgrade resource-agents-pafUpgrade resource-agents-aliyunUpgrade fence-agents-openstackUpgrade fence-agents-debugsource | Feb 5, 2026 | Sep 8, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 10.2.1 | Mar 20, 2026 | Jun 9, 2025 |
| Suse | — | Upgrade python313-requestsUpgrade python-requestsUpgrade python3-requestsUpgrade python311-requests | Dec 5, 2025 | Aug 4, 2025 |
| Ubuntu | — | Upgrade python3-pipUpgrade python-requests (Ubuntu Pro)Upgrade python3-requestsUpgrade python-requests-whl (Ubuntu Pro)Upgrade python3-requests (Ubuntu Pro)Upgrade python3-pip-whl | Jun 17, 2025 | Jun 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Jun 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub