{"action":"Upgrade requests to 2.32.4 or later.","affected":[{"fixed":"2.32.4","introduced":"0"}],"component":"requests","cve_ids":["CVE-2024-47081"],"ecosystem":"PyPI","epss":0.0098,"exploited":false,"fixed_versions":["2.32.4"],"ghsa_id":"GHSA-9hjg-9r4m-mvj7","id":"tcs_01M5JJ2VBQRCGE69Y0DZN66GGC","modified_at":"2026-10-19T20:00:04.716114530Z","published_at":"2025-06-09T19:06:08Z","references":["https://osv.dev/vulnerability/GHSA-9hjg-9r4m-mvj7","https://github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7","https://nvd.nist.gov/vuln/detail/CVE-2024-47081","https://github.com/psf/requests/pull/6965","https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef","https://github.com/advisories/GHSA-9hjg-9r4m-mvj7","https://github.com/psf/requests","https://github.com/psf/requests/releases/tag/v2.32.4","https://github.com/pypa/advisory-database/tree/main/vulns/requests/PYSEC-2026-1872.yaml","https://pypi.org/project/requests","https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env","https://seclists.org/fulldisclosure/2025/Jun/2","http://www.openwall.com/lists/oss-security/2025/06/03/11","http://www.openwall.com/lists/oss-security/2025/06/03/9","http://www.openwall.com/lists/oss-security/2025/06/04/1","http://www.openwall.com/lists/oss-security/2025/06/04/6"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-9hjg-9r4m-mvj7","url":"https://osv.dev/vulnerability/GHSA-9hjg-9r4m-mvj7"}],"summary":"Requests vulnerable to .netrc credentials leak via malicious URLs"}