tocsin

PyPI/requests CVE-2023-32681: unknown, EPSS 2.97%

Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint. This is a product of how we use `re

Action: Upgrade requests to 2.31.0 or later.

pip install requests==2.31.0

Affected

introducedfixedlast affected
2.3.02.31.0-

Fixed versions

2.31.0

Sources

CVE-2023-32681 · published · modified · JSON