PyPI/requests CVE-2024-47081: medium 5.3

Requests vulnerable to .netrc credentials leak via malicious URLs

Action: Upgrade requests to 2.32.4 or later.

pip install requests==2.32.4

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1872
• https://github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7
• https://nvd.nist.gov/vuln/detail/CVE-2024-47081
• https://github.com/psf/requests/pull/6965
• https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef
• https://github.com/psf/requests
• https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env
• https://seclists.org/fulldisclosure/2025/Jun/2
• http://seclists.org/fulldisclosure/2025/Jun/2
• http://www.openwall.com/lists/oss-security/2025/06/03/11
• http://www.openwall.com/lists/oss-security/2025/06/03/9
• http://www.openwall.com/lists/oss-security/2025/06/04/1
• http://www.openwall.com/lists/oss-security/2025/06/04/6
• https://pypi.org/project/requests
• https://github.com/advisories/GHSA-9hjg-9r4m-mvj7

CVE-2024-47081 · published 2026-07-07T16:02:54.151964Z · modified 2026-07-07T17:47:00.332079836Z · JSON