Critical Security Update for python-requests and python3-requests: CVE-2024-47081
Summary
RHSA-2025:13234: Red Hat Security Advisory: python-requests security update. Affects python-requests versions < 0:2.20.0-6.el8_10. Fixed in 0:2.20.0-6.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The python-requests and python3-requests packages are widely used libraries in Python for making HTTP requests simpler and more human-friendly. They provide a robust interface for sending HTTP requests and handling responses, making them essential for web applications and services. However, a recently identified vulnerability (CVE-2024-47081) poses a significant risk, potentially allowing unauthorized access to sensitive data.
Vulnerability Detail
The vulnerability identified as CVE-2024-47081 affects the python-requests and python3-requests packages. It originates from improper handling of certain HTTP requests, which could lead to sensitive information exposure. Attackers could exploit this vulnerability to gain unauthorized access to data transmitted over HTTP, compromising the integrity and confidentiality of the information. The CVSS score for this vulnerability is 5.3, indicating a moderate severity level that requires prompt attention.
How To Fix
Minimum fixed version
0:2.20.0-6.el8_10
This is the first release that contains the fix.
sudo dnf update python-requestsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not possible, consider implementing network-level security measures such as firewalls or VPNs to restrict access to sensitive data. Additionally, avoid using the affected libraries until they are updated.
Conclusion
The python-requests and python3-requests packages are critical for HTTP communication in Python applications. The identified vulnerability (CVE-2024-47081) poses a risk of unauthorized data access. It is crucial to update to the patched versions to mitigate this risk and ensure the security of your applications.
See every vulnerability recorded for python-requests →
FAQ
CVE-2024-47081 is a security vulnerability affecting the python-requests and python3-requests libraries, allowing unauthorized access to sensitive data.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score for this vulnerability is 5.3, indicating a moderate severity level.
If you cannot update the packages, consider implementing network-level security measures to protect sensitive data until a patch can be applied.
More information can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2025:13234.json.
Related vulnerabilities
Recent vulnerabilities recorded for python-requests.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
