psf

Products

ProductCVEsExploitedLatest
requests4–Mar 25, 2026
black3–Nov 5, 2026
psf/requests1–Nov 14, 2024

Exploited and recent CVEs

  • CVE-2026-114134 High 8.7 Black: GitHub Action installs unvalidated required-version from pyproject.toml 0.4%
  • CVE-2026-25645 Medium 4.4 Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function 0.2%
  • CVE-2026-32274 High 7.5 Black: Arbitrary file writes from unsanitized user input in cache file name 0.6%
  • CVE-2026-31900 High 8.7 Black's vulnerable version parsing leads to RCE in GitHub Action 0.5%
  • CVE-2024-47081 Medium 5.3 Requests vulnerable to .netrc credentials leak via malicious URLs 1.0%
  • CVE-2024-1682 Medium 4.3 Unclaimed S3 Bucket Reference in psf/requests Documentation 0.4%
  • CVE-2024-35195 Medium 5.6 Requests `Session` object does not verify requests after making first request with verify=False 0.3%
  • CVE-2023-32681 Medium 6.1 Unintended leak of Proxy-Authorization header in requests 3.0%