Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fence-agents-computeUpgrade resource-agents-aliyunUpgrade fence-agents-intelmodularUpgrade fence-agents-kubevirtUpgrade resource-agents-pafUpgrade fence-agents-eaton-snmpUpgrade fence-agents-ipmilanUpgrade fence-agents-ibm-powervsUpgrade resource-agentsUpgrade fence-agents-ilo-sshUpgrade fence-agents-brocadeUpgrade fence-agents-amt-wsUpgrade fence-agents-heuristics-pingUpgrade fence-agents-cisco-ucsUpgrade fence-agents-ibmbladeUpgrade python3-requestsUpgrade fence-agents-scsiUpgrade fence-agents-lparUpgrade fence-agents-rhevmUpgrade fence-agents-ifmibUpgrade fence-agents-apc-snmpUpgrade fence-agents-ipduUpgrade fence-agents-wtiUpgrade fence-agents-sbdUpgrade fence-agents-drac5Upgrade fence-agents-zvmUpgrade fence-agents-ilo-mpUpgrade resource-agents-gcpUpgrade fence-agents-emersonUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-redfishUpgrade fence-agents-epsUpgrade fence-agents-ibm-vpcUpgrade fence-agents-virshUpgrade python3-requests+socksUpgrade fence-agents-commonUpgrade fence-agents-allUpgrade fence-agents-mpathUpgrade fence-agents-vmware-restUpgrade fence-agents-rsaUpgrade fence-agents-ilo2Upgrade fence-agents-hpbladeUpgrade fence-agents-apcUpgrade fence-agents-vmware-soapUpgrade fence-agents-cisco-mdsUpgrade python3-requests+securityUpgrade fence-agents-bladecenterUpgrade fence-agents-kdumpUpgrade fence-agents-rsb | Aug 5, 2025 | Aug 4, 2025 |
| Alpine Linux | — | Upgrade py3-requests | Aug 8, 2025 | Jun 9, 2025 |
| Amazon Linux Ami 2 | — | Upgrade python3-requestsUpgrade aws-cfn-bootstrapUpgrade python-requestsUpgrade python-pip-wheelUpgrade python2-pipUpgrade python3-pip | Jun 25, 2025 | Jun 9, 2025 |
| Debian | — | No solution existsUpgrade requests | Jun 5, 2025 | Jun 5, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-requests | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python-requests-helpUpgrade python3-requests | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-pipUpgrade python-pip-wheel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-requests | Sep 25, 2025 | Sep 9, 2025 |
| Ibm Aix | — | Apply the fix or workaround for python_advisory17 | Nov 20, 2025 | Nov 19, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade fence-agents-ibmbladeUpgrade fence-agents-heuristics-pingUpgrade fence-agents-kubevirtUpgrade fence-agents-ilo-sshUpgrade fence-agents-virshUpgrade fence-agents-kdumpUpgrade fence-agents-eaton-snmpUpgrade python3-requests+socksUpgrade fence-agents-emersonUpgrade fence-agents-apc-snmpUpgrade fence-agents-brocadeUpgrade fence-agents-commonUpgrade fence-agents-ilo2Upgrade resource-agentsUpgrade fence-agents-sbdUpgrade fence-agents-drac5Upgrade fence-agents-cisco-ucsUpgrade fence-agents-rsaUpgrade python3-requests+securityUpgrade fence-agents-epsUpgrade fence-agents-computeUpgrade fence-agents-amt-wsUpgrade fence-agents-rsbUpgrade fence-agents-rhevmUpgrade fence-agents-ibm-powervsUpgrade fence-agents-ibm-vpcUpgrade fence-agents-vmware-soapUpgrade fence-agents-scsiUpgrade python3-requestsUpgrade fence-agents-ipmilanUpgrade fence-agents-ipduUpgrade fence-agents-redfishUpgrade fence-agents-bladecenterUpgrade fence-agents-lparUpgrade fence-agents-hpbladeUpgrade fence-agents-wtiUpgrade fence-agents-mpathUpgrade fence-agents-ilo-mpUpgrade fence-agents-cisco-mdsUpgrade fence-agents-intelmodularUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-ifmibUpgrade fence-agents-apcUpgrade fence-agents-allUpgrade fence-agents-vmware-rest | Aug 5, 2025 | Jun 9, 2025 |
| Redhat_linux | — | Upgrade fence-agents-apc-snmpUpgrade fence-agents-computeUpgrade fence-agents-ibm-powervsUpgrade fence-agents-virshUpgrade fence-agents-openstackUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-emersonUpgrade fence-agents-amt-wsUpgrade fence-agents-zvmUpgrade resource-agents-pafUpgrade fence-agents-vmware-soapUpgrade fence-agents-rhevmUpgrade fence-agents-hpbladeUpgrade fence-agents-brocadeUpgrade fence-agents-ilo-sshUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-azure-armUpgrade resource-agentsUpgrade fence-agents-cisco-ucsUpgrade fence-agents-allUpgrade fence-agents-commonUpgrade fence-agents-kdumpUpgrade fence-agents-ipduUpgrade fence-agents-cisco-mdsUpgrade fence-agents-ibm-vpcUpgrade fence-agents-aliyun-debuginfoUpgrade fence-agents-vmware-restUpgrade fence-agents-rsbUpgrade fence-agents-ifmibUpgrade fence-agents-sbdUpgrade fence-agents-epsUpgrade resource-agents-gcpUpgrade fence-agents-mpathUpgrade fence-agents-ilo-mpUpgrade python3-requests+socksUpgrade fence-agents-eaton-snmpUpgrade fence-agents-rsaUpgrade fence-agents-kubevirtUpgrade fence-agents-ibmbladeUpgrade fence-agents-heuristics-pingUpgrade fence-agents-azure-arm-debuginfoUpgrade resource-agents-aliyunUpgrade fence-agents-gceUpgrade fence-agents-kdump-debuginfoUpgrade fence-agents-awsUpgrade fence-agents-lparUpgrade fence-agents-redfishUpgrade fence-agents-wtiUpgrade fence-agents-ipmilanUpgrade fence-agents-intelmodularUpgrade fence-agents-aliyunUpgrade python3-requests+securityUpgrade resource-agents-aliyun-debuginfoUpgrade fence-agents-scsiUpgrade fence-agents-apcUpgrade python3-requestsUpgrade fence-agents-debugsourceUpgrade resource-agents-debugsourceUpgrade fence-agents-debuginfoUpgrade fence-agents-bladecenterUpgrade fence-agents-drac5Upgrade fence-agents-ilo2No solution existsUpgrade resource-agents-debuginfo | Jul 9, 2025 | Jun 9, 2025 |
| Rocky_linux | — | Upgrade resource-agents-aliyunUpgrade fence-agents-openstackUpgrade fence-agents-aliyun-debuginfoUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-debuginfoUpgrade resource-agentsUpgrade resource-agents-debuginfoUpgrade fence-agents-debugsourceUpgrade resource-agents-pafUpgrade fence-agents-kubevirtUpgrade resource-agents-gcpUpgrade fence-agents-aliyunUpgrade fence-agents-azure-armUpgrade fence-agents-allUpgrade resource-agents-aliyun-debuginfoUpgrade fence-agents-redfishUpgrade fence-agents-kdump-debuginfoUpgrade fence-agents-kdumpUpgrade fence-agents-azure-arm-debuginfoUpgrade resource-agents-debugsource | Feb 5, 2026 | Sep 8, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 10.2.1 | Mar 20, 2026 | Jun 9, 2025 |
| Suse | — | Upgrade python313-requestsUpgrade python-requestsUpgrade python311-requestsUpgrade python3-requests | Dec 5, 2025 | Aug 4, 2025 |
| Ubuntu | — | Upgrade python3-pip-whlUpgrade python3-requests (Ubuntu Pro)Upgrade python3-pipUpgrade python3-requestsUpgrade python-requests (Ubuntu Pro)Upgrade python-requests-whl (Ubuntu Pro) | Jun 17, 2025 | Jun 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Jun 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub