Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fence-agents-lparUpgrade fence-agents-wtiUpgrade fence-agents-sbdUpgrade fence-agents-heuristics-pingUpgrade fence-agents-amt-wsUpgrade python3-requestsUpgrade fence-agents-intelmodularUpgrade fence-agents-eaton-snmpUpgrade fence-agents-ipduUpgrade fence-agents-ilo-sshUpgrade resource-agentsUpgrade resource-agents-aliyunUpgrade fence-agents-brocadeUpgrade resource-agents-pafUpgrade fence-agents-scsiUpgrade fence-agents-kubevirtUpgrade fence-agents-ipmilanUpgrade fence-agents-rhevmUpgrade fence-agents-ibm-powervsUpgrade fence-agents-computeUpgrade fence-agents-apc-snmpUpgrade fence-agents-ibmbladeUpgrade fence-agents-ifmibUpgrade fence-agents-cisco-ucsUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-cisco-mdsUpgrade fence-agents-mpathUpgrade resource-agents-gcpUpgrade python3-requests+socksUpgrade fence-agents-apcUpgrade fence-agents-bladecenterUpgrade fence-agents-emersonUpgrade fence-agents-ilo-mpUpgrade fence-agents-commonUpgrade fence-agents-kdumpUpgrade fence-agents-allUpgrade fence-agents-vmware-soapUpgrade fence-agents-zvmUpgrade fence-agents-vmware-restUpgrade fence-agents-hpbladeUpgrade fence-agents-virshUpgrade fence-agents-drac5Upgrade fence-agents-redfishUpgrade python3-requests+securityUpgrade fence-agents-epsUpgrade fence-agents-ilo2Upgrade fence-agents-rsbUpgrade fence-agents-rsaUpgrade fence-agents-ibm-vpc | Aug 5, 2025 | Aug 4, 2025 |
| Alpine Linux | — | Upgrade py3-requests | Aug 8, 2025 | Jun 9, 2025 |
| Amazon Linux Ami 2 | — | Upgrade python-pip-wheelUpgrade aws-cfn-bootstrapUpgrade python2-pipUpgrade python3-requestsUpgrade python-requestsUpgrade python3-pip | Jun 25, 2025 | Jun 9, 2025 |
| Debian | — | No solution existsUpgrade requests | Jun 5, 2025 | Jun 5, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-requests | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python-requests-helpUpgrade python3-requests | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python-pip-wheelUpgrade python3-pip | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-requests | Sep 25, 2025 | Sep 9, 2025 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory17 | Nov 20, 2025 | Nov 19, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade fence-agents-intelmodularUpgrade fence-agents-redfishUpgrade fence-agents-bladecenterUpgrade fence-agents-vmware-soapUpgrade fence-agents-mpathUpgrade fence-agents-wtiUpgrade fence-agents-lparUpgrade fence-agents-hpbladeUpgrade fence-agents-scsiUpgrade fence-agents-cisco-mdsUpgrade fence-agents-ilo-mpUpgrade python3-requestsUpgrade fence-agents-vmware-restUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-allUpgrade fence-agents-ifmibUpgrade fence-agents-apcUpgrade fence-agents-ipduUpgrade fence-agents-ipmilanUpgrade fence-agents-emersonUpgrade fence-agents-drac5Upgrade resource-agentsUpgrade fence-agents-rsbUpgrade fence-agents-ibmbladeUpgrade fence-agents-epsUpgrade fence-agents-ilo-sshUpgrade fence-agents-amt-wsUpgrade fence-agents-ibm-vpcUpgrade fence-agents-rhevmUpgrade fence-agents-computeUpgrade fence-agents-rsaUpgrade fence-agents-ilo2Upgrade fence-agents-sbdUpgrade fence-agents-kdumpUpgrade fence-agents-heuristics-pingUpgrade fence-agents-ibm-powervsUpgrade python3-requests+securityUpgrade fence-agents-cisco-ucsUpgrade fence-agents-brocadeUpgrade fence-agents-kubevirtUpgrade fence-agents-commonUpgrade fence-agents-eaton-snmpUpgrade fence-agents-virshUpgrade python3-requests+socksUpgrade fence-agents-apc-snmp | Aug 5, 2025 | Jun 9, 2025 |
| Redhat_linux | — | Upgrade fence-agents-computeUpgrade fence-agents-ibm-powervsUpgrade fence-agents-ilo-mpUpgrade fence-agents-cisco-ucsUpgrade fence-agents-eaton-snmpUpgrade fence-agents-commonUpgrade fence-agents-allUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-brocadeUpgrade fence-agents-cisco-mdsUpgrade fence-agents-azure-armUpgrade fence-agents-ifmibUpgrade fence-agents-ipduUpgrade fence-agents-apc-snmpUpgrade fence-agents-sbdUpgrade fence-agents-aliyun-debuginfoUpgrade fence-agents-ibm-vpcUpgrade python3-requests+socksUpgrade fence-agents-epsUpgrade fence-agents-amt-wsUpgrade fence-agents-virshUpgrade fence-agents-rsbUpgrade fence-agents-mpathUpgrade resource-agents-gcpUpgrade fence-agents-zvmUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-hpbladeUpgrade fence-agents-openstackUpgrade fence-agents-rhevmUpgrade fence-agents-kdumpUpgrade resource-agents-pafUpgrade fence-agents-vmware-soapUpgrade fence-agents-vmware-restUpgrade resource-agentsUpgrade fence-agents-ilo-sshUpgrade fence-agents-emersonUpgrade fence-agents-intelmodularUpgrade fence-agents-ipmilanUpgrade fence-agents-debugsourceUpgrade fence-agents-heuristics-pingUpgrade resource-agents-aliyunUpgrade fence-agents-azure-arm-debuginfoUpgrade fence-agents-awsUpgrade fence-agents-wtiUpgrade fence-agents-lparUpgrade fence-agents-redfishUpgrade fence-agents-debuginfoUpgrade resource-agents-aliyun-debuginfoUpgrade fence-agents-drac5Upgrade resource-agents-debuginfoUpgrade fence-agents-ilo2Upgrade fence-agents-kubevirtUpgrade fence-agents-ibmbladeUpgrade fence-agents-aliyunUpgrade fence-agents-rsaUpgrade python3-requests+securityUpgrade fence-agents-bladecenterUpgrade fence-agents-gceUpgrade fence-agents-kdump-debuginfoUpgrade fence-agents-scsiNo solution existsUpgrade python3-requestsUpgrade fence-agents-apcUpgrade resource-agents-debugsource | Jul 9, 2025 | Jun 9, 2025 |
| Rocky_linux | — | Upgrade resource-agents-pafUpgrade resource-agents-debuginfoUpgrade fence-agents-kubevirtUpgrade fence-agents-debuginfoUpgrade resource-agentsUpgrade fence-agents-debugsourceUpgrade resource-agents-aliyunUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-aliyun-debuginfoUpgrade fence-agents-openstackUpgrade fence-agents-azure-arm-debuginfoUpgrade resource-agents-debugsourceUpgrade fence-agents-kdump-debuginfoUpgrade fence-agents-kdumpUpgrade resource-agents-aliyun-debuginfoUpgrade fence-agents-redfishUpgrade fence-agents-aliyunUpgrade resource-agents-gcpUpgrade fence-agents-allUpgrade fence-agents-azure-arm | Feb 5, 2026 | Sep 8, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 10.2.1 | Mar 20, 2026 | Jun 9, 2025 |
| Suse | — | Upgrade python313-requestsUpgrade python3-requestsUpgrade python-requestsUpgrade python311-requests | Dec 5, 2025 | Aug 4, 2025 |
| Ubuntu | — | Upgrade python3-requests (Ubuntu Pro)Upgrade python3-pip-whlUpgrade python3-requestsUpgrade python-requests-whl (Ubuntu Pro)Upgrade python3-pipUpgrade python-requests (Ubuntu Pro) | Jun 17, 2025 | Jun 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Jun 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub