azure linux python-requests vulnerabilities

Latest azure linux python-requests CVEs

Newest publication first

1. CVE-2026-25645 Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function

   Published 2026-03-25

   Medium·CVSS 4.4

   Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extract_zipped_paths() utility function uses a predictable filename when extracting files from zip archives into the system temporary directory. If the target file already exists, it is reused without validat...

2. CVE-2024-47081 Requests vulnerable to .netrc credentials leak via malicious URLs

   Published 2025-07-11

   Medium·CVSS 5.3

   Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.