Skip to content
fr Sign in
5.6 Medium

CVE-2024-35195 Requests is a HTTP library

Description

Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. This vulnerability is fixed in 2.32.0.

Affected products and versions

Product Affected versions Fixed in
requests 2.32 earliest → < 2.32.0 2.32.0
request 2.32 earliest → < 2.32.0 2.32.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of requests

The 4 CVEs of requests →
CVE-2026-25645 Requests is a HTTP library 4.4 Medium CVE-2024-47081 Requests is a HTTP library 5.3 Medium CVE-2023-32681 Requests is a HTTP library 6.1 Medium
Track this CVE