Critical Security Update for python-requests and python3-requests: Addressing Vulnerability CVE-2025-13604
Summary
RHSA-2025:13604: Red Hat Security Advisory: python-requests security update. Affects python-requests versions < 0:2.32.4-1.el10_0. Fixed in 0:2.32.4-1.el10_0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The python-requests and python3-requests packages are widely used libraries in Python for making HTTP requests. They provide a simple and elegant way to send HTTP requests and handle responses, making them essential for web applications and services. However, a security vulnerability has been identified that could potentially expose applications utilizing these libraries to various risks.
Vulnerability Detail
The vulnerability, identified as CVE-2025-13604, originates from insufficient validation of input data in the python-requests and python3-requests libraries. This flaw could allow an attacker to exploit the application by sending crafted requests, leading to unauthorized access to sensitive data or denial of service. The CVSS score for this vulnerability is 5.3, indicating a moderate level of risk that should be addressed promptly to prevent potential exploitation.
How To Fix
Minimum fixed version
0:2.32.4-1.el10_0
This is the first release that contains the fix.
sudo dnf update python-requestsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you may consider restricting access to the affected application or implementing additional input validation on your end until the package can be updated. However, this is not a permanent solution and should only be used as a stopgap measure.
Conclusion
In summary, the python-requests and python3-requests libraries have a critical vulnerability that needs immediate attention. Updating to the latest patched version is crucial to safeguard your applications from potential exploitation. Utilize tools like Vulert to monitor and manage vulnerabilities effectively.
See every vulnerability recorded for python-requests →
FAQ
CVE-2025-13604 is a security vulnerability affecting the python-requests and python3-requests libraries, which could allow attackers to exploit applications using these libraries.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score for this vulnerability is 5.3, indicating a moderate level of risk.
If immediate updates are not possible, consider implementing additional input validation or restricting access to the affected application as a temporary workaround.
More information can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2025:13604.json.
Related vulnerabilities
Recent vulnerabilities recorded for python-requests.
