Request Project - vulnerabilities (CVEs)

4 CVEs in 1 products, 0 in the last 30 days, newest from 2025-12-05.

Products

• Request - 4 CVEs

Newest CVEs of Request Project

• CVE-2020-36876 - CVSS 8.7 (high), 2025-12-05: ReQuest Serious Play F3 Media Server versions 7.0.3.4968 (Pro), 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0.1.823 allows unauthenticated attackers…
• CVE-2024-35195 - CVSS 5.6 (medium), 2024-05-20: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable…
• CVE-2023-28155 - CVSS 6.1 (medium), 2023-03-16: The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP…
• CVE-2017-16026 - CVSS 5.9 (medium), 2018-06-04: Request is an http client. If a request is made using ```multipart```, and the body type is a ```number```, then the specified number of non-zero memory is…