VYPR
← All advisories
Medium severity5.6OSV Advisory· Published May 20, 2024· Updated Apr 15, 2026

CVE-2024-35195

CVE-2024-35195

Description

Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of verify. This behavior will continue for the lifecycle of the connection in the connection pool. This vulnerability is fixed in 2.32.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
requestsPyPI
< 2.32.02.32.0

Affected products

209

Patches

Vulnerability mechanics

References

9

News mentions

0

No linked articles in our index yet.