Tag
python-requests
Safeguard articles tagged "python-requests" — guides, analysis, and best practices for software supply chain and application security.
3 articles
Vulnerability Analysis
Python requests library proxy-auth credential leak (CVE-2023-32681)
CVE-2023-32681 lets Python's requests library leak Proxy-Authorization credentials to destination servers on HTTPS redirects. Here's the impact, timeline, and fix.
Dec 31, 20258 min read
Vulnerability Analysis
CVE-2018-18074: requests library leaks Authorization head...
The Python requests library leaked Authorization headers on same-host HTTPS-to-HTTP redirects, exposing credentials to sniffing before v2.20.0.
Oct 7, 20258 min read
Vulnerability Analysis
CVE-2023-32681: requests leaks Proxy-Authorization on red...
A malicious proxy could capture Proxy-Authorization credentials from Python's requests library when redirects crossed to HTTPS, before v2.31.0.
Oct 7, 20258 min read