Skip to content

Product

Microsoft cm2 python-requests 2.27.1-8 vulnerabilities

1 published CVE affecting Microsoft cm2 python-requests 2.27.1-8, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest Microsoft cm2 python-requests 2.27.1-8 CVEs

Newest publication first

  1. CVE-2024-47081 Requests vulnerable to .netrc credentials leak via malicious URLs

    Published
    MediumCVSS 5.3 EPSS 1.0%

    Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.