Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-16274
  • PyPI/requests-auroras
Malicious code in requests-auroras (PyPI) 3 days ago
  • No fix available
MAL-2026-16275
  • PyPI/requests-triwes
Malicious code in requests-triwes (PyPI) 3 days ago
  • No fix available
MAL-2026-16269
  • PyPI/requests-asetwe
Malicious code in requests-asetwe (PyPI) 3 days ago
  • No fix available
MAL-2026-14351
  • PyPI/requests-crypt
Malicious code in requests-crypt (PyPI) 21 Aug
  • No fix available
MAL-2026-14130
  • PyPI/httpz-requests
Malicious code in httpz-requests (PyPI) 18 Aug
  • No fix available
PYSEC-2026-3050
  • PyPI/requests-hardened
requests-hardened is Vulnerable to Server-Side Request Forgery 13 Jul
  • Fix available
  • Severity - 6.5 (Medium)
PYSEC-2026-1872
  • PyPI/requests
Requests vulnerable to .netrc credentials leak via malicious URLs 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-1873
  • PyPI/requests
Requests `Session` object does not verify requests after making first request with verify=False 07 Jul
  • Fix available
  • Severity - 5.6 (Medium)
MAL-2026-6247
  • PyPI/requests-enhancer
Malicious code in requests-enhancer (PyPI) 20 Jun
  • No fix available
MAL-2026-5519
  • PyPI/requests-toolbelt-plus
Malicious code in requests-toolbelt-plus (PyPI) 10 Jun
  • No fix available
MAL-2026-5184
  • PyPI/sf-silly-goose-requests
Malicious code in sf-silly-goose-requests (PyPI) 04 Jun
  • No fix available
MAL-2026-3662
  • PyPI/py-requests
Malicious code in py-requests (PyPI) 13 May
  • No fix available
GHSA-vh75-fwv3-pqrh
  • PyPI/requests-hardened
requests-hardened is Vulnerable to Server-Side Request Forgery 05 May
  • Fix available
  • Severity - 6.5 (Medium)
MAL-2026-3242
  • PyPI/sf-vmeval-requests
Malicious code in sf-vmeval-requests (PyPI) 03 May
  • No fix available
MAL-2026-3135
  • PyPI/sf-th-requests
Malicious code in sf-th-requests (PyPI) 28 Apr
  • No fix available
MAL-2026-2812
  • PyPI/requests-test-test44
Malicious code in requests-test-test44 (PyPI) 16 Apr
  • No fix available