Known Vulnerabilities for Requests by Python-requests
Listed below are 1 of the newest known vulnerabilities associated with "Requests" by "Python-requests".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-62143 json | A Server-Side Request Forgery (SSRF) protection bypass existed in the html_to_markdown expansion module of misp-modules. The... | Not Provided | 2026-07-13 | 2026-07-13 |
| CVE-2026-61875 json | luci-app-upnp contains a stored cross-site scripting vulnerability that allows unauthenticated LAN clients to inject JavaScri... | Not Provided | 2026-07-12 | 2026-07-13 |
| CVE-2026-61502 json | Rejetto HFS 3.0.0 through 3.2.0 accepts state-changing API requests via the GET method and exempts GET requests from its anti... | Not Provided | 2026-07-13 | 2026-07-13 |
| CVE-2026-61462 json | mcp-gitlab contains a path traversal vulnerability in the job_id parameter of build/index.js that allows attackers to redirec... | Not Provided | 2026-07-13 | 2026-07-13 |
| CVE-2026-60105 json | Monsta FTP before 2.14.5 contains a server-side request forgery vulnerability in the fetchRemoteFile action caused by an inco... | Not Provided | 2026-07-08 | 2026-07-09 |
| CVE-2026-60104 json | Bitwarden Server before 2026.6.0 does not verify that the email in a POST /auth-requests/admin-request body belongs to the au... | Not Provided | 2026-07-08 | 2026-07-09 |
| CVE-2026-59822 json | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, LiteLLM's MCP Streamab... | Not Provided | 2026-07-08 | 2026-07-09 |
| CVE-2026-59805 json | Gumroad before 2026.07.06.2 contains a broken access control vulnerability in the PurchasesController that allows authenticat... | Not Provided | 2026-07-08 | 2026-07-09 |
| CVE-2026-59725 json | Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before 6.6.7, Engine.IO protocol... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-59707 json | LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint that allows ... | Not Provided | 2026-07-07 | 2026-07-09 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Python-requests | Requests | 2.9.2 | |||
| Application | Python-requests | Requests | 2.9.1 | |||
| Application | Python-requests | Requests | 2.9.0 | |||
| Application | Python-requests | Requests | 2.8.1 | |||
| Application | Python-requests | Requests | 2.8.0 | |||
| Application | Python-requests | Requests | 2.7.0 | |||
| Application | Python-requests | Requests | 2.6.2 | |||
| Application | Python-requests | Requests | 2.6.1 | |||
| Application | Python-requests | Requests | 2.6.0 | |||
| Application | Python-requests | Requests | 2.5.3 | |||
| Application | Python-requests | Requests | 2.5.2 | |||
| Application | Python-requests | Requests | 2.5.1 | |||
| Application | Python-requests | Requests | 2.5.0 | |||
| Application | Python-requests | Requests | 2.4.3 | |||
| Application | Python-requests | Requests | 2.4.2 | |||
| Application | Python-requests | Requests | 2.4.1 | |||
| Application | Python-requests | Requests | 2.4.0 | |||
| Application | Python-requests | Requests | 2.3.0 | |||
| Application | Python-requests | Requests | 2.22.0 | |||
| Application | Python-requests | Requests | 2.21.0 |