Skip to content
OpenAdvisories
Medium DSA-3146-1 2 CVEs

requests - security update

Published Jan 30, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 requests 0.12.1-1+deb7u1

Vulnerabilities 2

  • Medium 5.3
    CVE-2014-1829

    Exposure of Sensitive Information to an Unauthorized Actor in Requests

    Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request.

    requests requests requests Debian Ubuntu PyPI
  • Medium —
    CVE-2014-1830

    Exposure of Sensitive Information to an Unauthorized Actor in Requests

    Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request.

    requests requests requests Debian Ubuntu PyPI