Skip to content
OpenAdvisories

Package · Alpine

py3-requests

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.4
    CVE-2026-25645 Public exploit

    Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function

    Requests is a HTTP library. Prior to version 2.33.0, the `requests.utils.extract_zipped_paths()` utility function uses a predictable filename when extracting files from zip archives into the system temporary directory. If the target file already exists, it is…

    psf requests python-pip requests Debian Ubuntu Alpine PyPI
  • Medium 5.3
    CVE-2024-47081

    Requests vulnerable to .netrc credentials leak via malicious URLs

    Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Reques…

    psf requests python-pip requests Debian Ubuntu Alpine PyPI
  • Medium 5.6
    CVE-2024-35195

    Requests `Session` object does not verify requests after making first request with verify=False

    Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification r…

    psf requests python-pip requests Debian Ubuntu Alpine PyPI