You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Path to vulnerable library: /cloudify_types,/mgmtworker,/amqp-postgres/test-requirements.txt,/cloudify_types/dev-requirements.txt,/workflows,/rest-service,/amqp-postgres,/cloudify_types,/rest-service/dev-requirements.txt
Requests is a HTTP library. Prior to 2.32.2, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of verify. This behavior will continue for the lifecycle of the connection in the connection pool. This vulnerability is fixed in 2.32.2.
CVE-2024-35195 - Medium Severity Vulnerability
Python HTTP for Humans.
Library home page: https://files.pythonhosted.org/packages/29/c1/24814557f1d22c56d50280771a17307e6bf87b70727d975fd6b2ce6b014a/requests-2.25.1-py2.py3-none-any.whl
Path to dependency file: /cloudify_types
Path to vulnerable library: /cloudify_types,/mgmtworker,/amqp-postgres/test-requirements.txt,/cloudify_types/dev-requirements.txt,/workflows,/rest-service,/amqp-postgres,/cloudify_types,/rest-service/dev-requirements.txt
Dependency Hierarchy:
Found in HEAD commit: 203fcf9f96b1849f0840fc2235bfef38a3ff706c
Found in base branch: master
Requests is a HTTP library. Prior to 2.32.2, when making requests through a Requests
Session
, if the first request is made withverify=False
to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value ofverify
. This behavior will continue for the lifecycle of the connection in the connection pool. This vulnerability is fixed in 2.32.2.Publish Date: 2024-05-20
URL: CVE-2024-35195
Base Score Metrics:
Type: Upgrade version
Origin: GHSA-9wx4-h78v-vm56
Release Date: 2024-05-20
Fix Resolution: 2.32.0
The text was updated successfully, but these errors were encountered: