CVE-2014-1829
Fixed in a distro release EPSS 2%
Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request.
Products: debian_linux, python requests, canonical ubuntu_linux, mageia
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | requests | 2.3.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | requests | 2.3.0-1 |
| Debian 13 | requests | 2.3.0-1 |
| Debian 14 | requests | 2.3.0-1 |
| Debian 7 | requests | 0.12.1-1+deb7u1 |
| Ubuntu 14.04 LTS | requests | 2.2.1-1ubuntu0.1 |
| openSUSE Tumbleweed | python-requests | 2.11.1-1.1 |
| openSUSE Tumbleweed | python-requests | 2.34.2-1.2 |
| openSUSE Tumbleweed | python3-requests | 2.11.1-1.2 |