Exposure of Sensitive Information to an Unauthorized Actor in Requests

Description

References

• nvd.nist.gov/vuln/detail/CVE-2014-1830 · ADVISORY
• kennethreitz/requests · WEB
• psf/requests · WEB
• bugs.debian.org/cgi-bin/bugreport.cgi · WEB
• psf/requests · PACKAGE
• pypa/advisory-database · WEB
• web.archive.org/web/20150523055216/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015:133 · WEB
• advisories.mageia.org/MGASA-2014-0409.html · WEB
• lists.opensuse.org/opensuse-updates/2016-01/msg00095.html · WEB
• debian.org/security/2015/dsa-3146 · WEB
• mandriva.com/security/advisories · WEB

Autres vulnérabilités de requests

• CVE-2026-25645MOYENNE 5.5Requests is a HTTP library. Prior to version 2.33.0, the `requests.utils.extract_zipped_paths()` utility function uses a predictable filenam…
• CVE-2024-47081MOYENNE 5.3Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for s…
• CVE-2024-35195MOYENNE 5.6Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=Fa…
• CVE-2023-32681MOYENNE 6.1Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination servers when redirect…
• CVE-2018-18074ÉLEVÉE 7.5The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http…