Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fence-agents-mpathUpgrade resource-agents-gcpUpgrade fence-agents-cisco-mdsUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-vmware-restUpgrade fence-agents-zvmUpgrade fence-agents-drac5Upgrade fence-agents-virshUpgrade fence-agents-hpbladeUpgrade fence-agents-vmware-soapUpgrade fence-agents-allUpgrade fence-agents-epsUpgrade fence-agents-rsaUpgrade fence-agents-redfishUpgrade fence-agents-emersonUpgrade fence-agents-ilo2Upgrade fence-agents-rsbUpgrade fence-agents-ibm-vpcUpgrade fence-agents-apcUpgrade python3-requests+socksUpgrade fence-agents-ilo-mpUpgrade fence-agents-commonUpgrade python3-requests+securityUpgrade fence-agents-kdumpUpgrade fence-agents-bladecenterUpgrade python3-requestsUpgrade resource-agents-aliyunUpgrade fence-agents-ilo-sshUpgrade fence-agents-kubevirtUpgrade fence-agents-sbdUpgrade fence-agents-ipmilanUpgrade fence-agents-brocadeUpgrade fence-agents-cisco-ucsUpgrade fence-agents-computeUpgrade fence-agents-lparUpgrade fence-agents-wtiUpgrade fence-agents-ipduUpgrade fence-agents-intelmodularUpgrade fence-agents-apc-snmpUpgrade fence-agents-heuristics-pingUpgrade fence-agents-amt-wsUpgrade fence-agents-ifmibUpgrade resource-agents-pafUpgrade fence-agents-ibm-powervsUpgrade resource-agentsUpgrade fence-agents-rhevmUpgrade fence-agents-scsiUpgrade fence-agents-ibmbladeUpgrade fence-agents-eaton-snmp | Aug 5, 2025 | Aug 4, 2025 |
| Alpine Linux | — | Upgrade py3-requests | Aug 8, 2025 | Jun 9, 2025 |
| Amazon Linux Ami 2 | — | Upgrade python-requestsUpgrade python-pip-wheelUpgrade python2-pipUpgrade aws-cfn-bootstrapUpgrade python3-requestsUpgrade python3-pip | Jun 25, 2025 | Jun 9, 2025 |
| Debian | — | Upgrade requestsNo solution exists | Jun 5, 2025 | Jun 5, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-requests | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-requestsUpgrade python-requests-help | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python-pip-wheelUpgrade python3-pip | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-requests | Sep 25, 2025 | Sep 9, 2025 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory17 | Nov 20, 2025 | Nov 19, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade python3-requestsUpgrade fence-agents-hpbladeUpgrade fence-agents-mpathUpgrade fence-agents-scsiUpgrade fence-agents-vmware-soapUpgrade fence-agents-lparUpgrade fence-agents-allUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-apcUpgrade fence-agents-vmware-restUpgrade fence-agents-redfishUpgrade fence-agents-cisco-mdsUpgrade fence-agents-ifmibUpgrade fence-agents-ipduUpgrade fence-agents-bladecenterUpgrade fence-agents-ilo-mpUpgrade fence-agents-wtiUpgrade fence-agents-intelmodularUpgrade fence-agents-ipmilanUpgrade fence-agents-kdumpUpgrade fence-agents-computeUpgrade resource-agentsUpgrade fence-agents-rsaUpgrade fence-agents-drac5Upgrade fence-agents-ilo-sshUpgrade fence-agents-ibm-vpcUpgrade python3-requests+securityUpgrade fence-agents-ibm-powervsUpgrade fence-agents-commonUpgrade fence-agents-brocadeUpgrade fence-agents-kubevirtUpgrade fence-agents-eaton-snmpUpgrade fence-agents-apc-snmpUpgrade python3-requests+socksUpgrade fence-agents-virshUpgrade fence-agents-ibmbladeUpgrade fence-agents-rsbUpgrade fence-agents-sbdUpgrade fence-agents-heuristics-pingUpgrade fence-agents-epsUpgrade fence-agents-amt-wsUpgrade fence-agents-cisco-ucsUpgrade fence-agents-rhevmUpgrade fence-agents-ilo2Upgrade fence-agents-emerson | Aug 5, 2025 | Jun 9, 2025 |
| Redhat_linux | — | Upgrade fence-agents-wtiNo solution existsUpgrade fence-agents-bladecenterUpgrade fence-agents-debuginfoUpgrade fence-agents-kdump-debuginfoUpgrade fence-agents-lparUpgrade fence-agents-redfishUpgrade fence-agents-debugsourceUpgrade fence-agents-aliyunUpgrade fence-agents-kubevirtUpgrade fence-agents-ibmbladeUpgrade resource-agents-aliyunUpgrade fence-agents-awsUpgrade fence-agents-azure-arm-debuginfoUpgrade fence-agents-intelmodularUpgrade resource-agents-aliyun-debuginfoUpgrade fence-agents-gceUpgrade fence-agents-ipmilanUpgrade python3-requests+securityUpgrade fence-agents-rsaUpgrade resource-agents-debuginfoUpgrade fence-agents-drac5Upgrade fence-agents-scsiUpgrade fence-agents-ilo2Upgrade fence-agents-heuristics-pingUpgrade python3-requestsUpgrade fence-agents-apcUpgrade resource-agents-debugsourceUpgrade fence-agents-cisco-mdsUpgrade fence-agents-emersonUpgrade fence-agents-virshUpgrade fence-agents-ilo-sshUpgrade fence-agents-epsUpgrade fence-agents-amt-wsUpgrade fence-agents-brocadeUpgrade fence-agents-hpbladeUpgrade fence-agents-vmware-soapUpgrade fence-agents-zvmUpgrade fence-agents-rhevmUpgrade fence-agents-openstackUpgrade fence-agents-cisco-ucsUpgrade fence-agents-apc-snmpUpgrade fence-agents-commonUpgrade fence-agents-computeUpgrade fence-agents-ibm-powervsUpgrade fence-agents-vmware-restUpgrade resource-agentsUpgrade fence-agents-ipduUpgrade fence-agents-ifmibUpgrade fence-agents-allUpgrade fence-agents-eaton-snmpUpgrade fence-agents-kdumpUpgrade fence-agents-ilo-mpUpgrade fence-agents-azure-armUpgrade fence-agents-mpathUpgrade resource-agents-pafUpgrade resource-agents-gcpUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-sbdUpgrade fence-agents-ilo-moonshotUpgrade python3-requests+socksUpgrade fence-agents-rsbUpgrade fence-agents-ibm-vpcUpgrade fence-agents-aliyun-debuginfo | Jul 9, 2025 | Jun 9, 2025 |
| Rocky_linux | — | Upgrade resource-agents-pafUpgrade fence-agents-debuginfoUpgrade resource-agents-debuginfoUpgrade resource-agentsUpgrade fence-agents-kubevirtUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-debugsourceUpgrade resource-agents-aliyunUpgrade fence-agents-aliyun-debuginfoUpgrade fence-agents-openstackUpgrade fence-agents-azure-armUpgrade fence-agents-kdumpUpgrade fence-agents-redfishUpgrade fence-agents-allUpgrade resource-agents-aliyun-debuginfoUpgrade resource-agents-gcpUpgrade fence-agents-kdump-debuginfoUpgrade resource-agents-debugsourceUpgrade fence-agents-aliyunUpgrade fence-agents-azure-arm-debuginfo | Feb 5, 2026 | Sep 8, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 10.2.1 | Mar 20, 2026 | Jun 9, 2025 |
| Suse | — | Upgrade python313-requestsUpgrade python311-requestsUpgrade python-requestsUpgrade python3-requests | Dec 5, 2025 | Aug 4, 2025 |
| Ubuntu | — | Upgrade python3-pip-whlUpgrade python3-requests (Ubuntu Pro)Upgrade python-requests (Ubuntu Pro)Upgrade python3-pipUpgrade python3-requestsUpgrade python-requests-whl (Ubuntu Pro) | Jun 17, 2025 | Jun 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Jun 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub