Vulnerabilities > Python > Requests

DATE CVE VULNERABILITY TITLE RISK
2023-05-26 CVE-2023-32681 Information Exposure vulnerability in multiple products
Requests is a HTTP library.
network
high complexity
python fedoraproject CWE-200
6.1
2018-10-09 CVE-2018-18074 Insufficiently Protected Credentials vulnerability in multiple products
The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
network
low complexity
python canonical opensuse redhat CWE-522
7.5