Files
nixpkgs/pkgs/development/python-modules/requests
Martin Weinelt efe9610691 python3Packages.requests: fix netrc credential leak vulnerability
Patches a disclosed unfixed vulnerability in the popular requests package
where improper URL parsing could be fooled to disclose any credentials
from a netrc configuration.

https://seclists.org/fulldisclosure/2025/Jun/2

Fixes: CVE-2024-47081
(cherry picked from commit 1d22f98be8)
2025-06-04 15:40:41 +00:00
..