kennethreitz/requests

kennethreitz/requests

on GitHub

141 releases

new releases every 3 weeks 4 days

last release was 12/16/2020

last checked yesterday at 6:30 PM

254

A simple, yet elegant HTTP library.

Log in to subscribe

CVE History

CVE	Published	CVSS v2	CVSS v3
CVE-2015-2296	March 18, 2015	N/A	6.8 MEDIUM
The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a redirect.
CVE-2014-1829	October 15, 2014	N/A	5 MEDIUM
Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request.
CVE-2014-1830	October 15, 2014	N/A	5 MEDIUM
Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request.