Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-requestsUpgrade fence-agents-lparUpgrade resource-agents-pafUpgrade fence-agents-rhevmUpgrade fence-agents-computeUpgrade fence-agents-scsiUpgrade fence-agents-ipmilanUpgrade fence-agents-kubevirtUpgrade resource-agentsUpgrade fence-agents-apc-snmpUpgrade fence-agents-ipduUpgrade fence-agents-heuristics-pingUpgrade fence-agents-intelmodularUpgrade fence-agents-ibmbladeUpgrade fence-agents-sbdUpgrade fence-agents-eaton-snmpUpgrade fence-agents-brocadeUpgrade fence-agents-cisco-ucsUpgrade fence-agents-ifmibUpgrade fence-agents-amt-wsUpgrade fence-agents-wtiUpgrade fence-agents-ibm-powervsUpgrade fence-agents-ilo-sshUpgrade resource-agents-aliyunUpgrade fence-agents-rsaUpgrade fence-agents-rsbUpgrade fence-agents-allUpgrade fence-agents-virshUpgrade fence-agents-hpbladeUpgrade fence-agents-drac5Upgrade fence-agents-ilo2Upgrade python3-requests+securityUpgrade fence-agents-redfishUpgrade fence-agents-epsUpgrade fence-agents-kdumpUpgrade fence-agents-emersonUpgrade fence-agents-vmware-restUpgrade python3-requests+socksUpgrade fence-agents-ibm-vpcUpgrade fence-agents-commonUpgrade fence-agents-ilo-mpUpgrade fence-agents-vmware-soapUpgrade fence-agents-zvmUpgrade fence-agents-apcUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-mpathUpgrade resource-agents-gcpUpgrade fence-agents-cisco-mdsUpgrade fence-agents-bladecenter | Aug 5, 2025 | Aug 4, 2025 |
| Alpine Linux | — | Upgrade py3-requests | Aug 8, 2025 | Jun 9, 2025 |
| Amazon Linux Ami 2 | — | Upgrade python3-pipUpgrade python3-requestsUpgrade python-pip-wheelUpgrade python2-pipUpgrade aws-cfn-bootstrapUpgrade python-requests | Jun 25, 2025 | Jun 9, 2025 |
| Debian | — | Upgrade requests | Jun 5, 2025 | Jun 5, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-requests | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python-requests-helpUpgrade python3-requests | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-pipUpgrade python-pip-wheel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-requests | Sep 25, 2025 | Sep 9, 2025 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory17 | Nov 20, 2025 | Nov 19, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade fence-agents-ilo2Upgrade fence-agents-ilo-sshUpgrade fence-agents-sbdUpgrade resource-agentsUpgrade fence-agents-kubevirtUpgrade python3-requests+socksUpgrade fence-agents-apc-snmpUpgrade fence-agents-emersonUpgrade fence-agents-computeUpgrade fence-agents-ibm-powervsUpgrade python3-requests+securityUpgrade fence-agents-ibm-vpcUpgrade fence-agents-commonUpgrade fence-agents-rsaUpgrade fence-agents-eaton-snmpUpgrade fence-agents-epsUpgrade fence-agents-brocadeUpgrade fence-agents-virshUpgrade fence-agents-heuristics-pingUpgrade fence-agents-drac5Upgrade fence-agents-rhevmUpgrade fence-agents-amt-wsUpgrade fence-agents-cisco-ucsUpgrade fence-agents-ibmbladeUpgrade fence-agents-kdumpUpgrade fence-agents-rsbUpgrade fence-agents-ipduUpgrade fence-agents-vmware-soapUpgrade python3-requestsUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-ifmibUpgrade fence-agents-apcUpgrade fence-agents-allUpgrade fence-agents-vmware-restUpgrade fence-agents-cisco-mdsUpgrade fence-agents-scsiUpgrade fence-agents-intelmodularUpgrade fence-agents-ilo-mpUpgrade fence-agents-redfishUpgrade fence-agents-bladecenterUpgrade fence-agents-ipmilanUpgrade fence-agents-mpathUpgrade fence-agents-lparUpgrade fence-agents-hpbladeUpgrade fence-agents-wti | Aug 5, 2025 | Jun 9, 2025 |
| Redhat_linux | — | Upgrade fence-agents-ilo2Upgrade fence-agents-debuginfoUpgrade fence-agents-wtiUpgrade fence-agents-kubevirtUpgrade fence-agents-rsaUpgrade fence-agents-kdump-debuginfoUpgrade fence-agents-apcUpgrade fence-agents-debugsourceUpgrade fence-agents-scsiUpgrade resource-agents-debugsourceUpgrade fence-agents-redfishUpgrade fence-agents-drac5Upgrade fence-agents-ibmbladeUpgrade fence-agents-gceNo solution existsUpgrade fence-agents-heuristics-pingUpgrade fence-agents-ipmilanUpgrade resource-agents-aliyunUpgrade fence-agents-awsUpgrade python3-requestsUpgrade resource-agents-debuginfoUpgrade fence-agents-lparUpgrade fence-agents-aliyunUpgrade resource-agents-aliyun-debuginfoUpgrade python3-requests+securityUpgrade fence-agents-intelmodularUpgrade fence-agents-azure-arm-debuginfoUpgrade fence-agents-bladecenterUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-mpathUpgrade fence-agents-epsUpgrade fence-agents-brocadeUpgrade fence-agents-azure-armUpgrade resource-agentsUpgrade fence-agents-allUpgrade resource-agents-gcpUpgrade fence-agents-ibm-powervsUpgrade fence-agents-apc-snmpUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-computeUpgrade fence-agents-cisco-ucsUpgrade fence-agents-openstackUpgrade fence-agents-rhevmUpgrade resource-agents-pafUpgrade fence-agents-zvmUpgrade fence-agents-hpbladeUpgrade fence-agents-commonUpgrade fence-agents-eaton-snmpUpgrade fence-agents-vmware-soapUpgrade fence-agents-ilo-mpUpgrade fence-agents-vmware-restUpgrade fence-agents-amt-wsUpgrade fence-agents-ifmibUpgrade fence-agents-emersonUpgrade fence-agents-cisco-mdsUpgrade fence-agents-virshUpgrade fence-agents-kdumpUpgrade fence-agents-ipduUpgrade fence-agents-ilo-sshUpgrade fence-agents-rsbUpgrade fence-agents-sbdUpgrade fence-agents-aliyun-debuginfoUpgrade fence-agents-ibm-vpcUpgrade python3-requests+socks | Jul 9, 2025 | Jun 9, 2025 |
| Rocky_linux | — | Upgrade resource-agents-debugsourceUpgrade fence-agents-allUpgrade resource-agents-gcpUpgrade fence-agents-aliyunUpgrade fence-agents-azure-armUpgrade fence-agents-azure-arm-debuginfoUpgrade fence-agents-redfishUpgrade resource-agents-aliyun-debuginfoUpgrade fence-agents-kdump-debuginfoUpgrade fence-agents-kdumpUpgrade resource-agents-pafUpgrade fence-agents-openstackUpgrade fence-agents-debuginfoUpgrade fence-agents-debugsourceUpgrade resource-agentsUpgrade fence-agents-kubevirtUpgrade resource-agents-aliyunUpgrade resource-agents-debuginfoUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-aliyun-debuginfo | Feb 5, 2026 | Sep 8, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 10.2.1 | Mar 20, 2026 | Jun 9, 2025 |
| Suse | — | Upgrade python3-requestsUpgrade python311-requestsUpgrade python-requestsUpgrade python313-requests | Dec 5, 2025 | Aug 4, 2025 |
| Ubuntu | — | Upgrade python3-requests (Ubuntu Pro)Upgrade python3-pip-whlUpgrade python-requests (Ubuntu Pro)Upgrade python3-pipUpgrade python3-requestsUpgrade python-requests-whl (Ubuntu Pro) | Jun 17, 2025 | Jun 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Jun 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub