CVE-2021-29476

Requests is a HTTP library written in PHP. Requests mishandles deserialization in FilteredIterator. The issue has been patched and users of `Requests` 1.6.0, 1.6.1 and 1.7.0 should update to version 1.8.0.

Score

CVSS 3.1 9.8 Critical

Status

Modified - security-advisories@github.com

Published

2021-04-27

Last modified

2024-08-03

Weaknesses

CWE-502

Affected products

• Requests (Wordpress)

References

• https://github.com/WordPress/Requests/security/advisories/GHSA-52qp-jpq7-6c54
• https://github.com/rmccue/Requests/pull/421