RE
Product
Requests
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add Requests to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-18074 | 7.5 | Oct 9 | The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for… Affected: before 2.20.0 |
| CVE-2023-32681 | 6.1 | May 26 | Requests is a HTTP library Affected: 2.3.0 before 2.31.0 |
| CVE-2026-25645 | 5.5 | Mar 25 | Requests is a HTTP library Affected: before 2.33.0 |
| CVE-2015-2296 | – | Mar 18 | The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a… Affected: 2.1.0; 2.2.1; 2.3.0; 2.4.0; 2.4.1; 2.4.2; +5 more |
| CVE-2014-1830 | – | Oct 15 | Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request Affected: through 2.2.1 |
| CVE-2014-1829 | – | Oct 15 | Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request Affected: through 2.2.1 |
Showing 6