Skip to content

PatchFirst · Latest vulnerabilities

requests vulnerabilities

Vulnerabilities published for requests in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 1

CVE-2018-18074
High · CVSS 7.5EPSS 6.93%Fix available
CVE-2018-18074
The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
requests Operating systems
- Update to 2.9.1-3ubuntu0.1
Published October 9, 2018Updated August 5, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →