CVE-2024-35195

Medium

Advisory

Published 20 May 2024In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.6; base score, highest
EPSS: 0.003; 27th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 605; of 17,787 indexed, latest versions
Container images: 658; deployed by those charts
Fix available: 3 of 4; affected packages

Requests `Session` object does not verify requests after making first request with verify=False

Carried by container images the latest versions of 605 of 17,787 indexed charts deploy, on 658 images.

Affected package	Affected versions	Fixed in	Images
requestspypi	2.2.1, 2.6.0, 2.9.1, 2.10.0+22 more	2.32.0	612
python-pipdeb	1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+23 more	22.0.2+dfsg-1ubuntu0.7+esm1, 24.0+dfsg-1ubuntu1.3+esm1	108
requestsdeb	2.2.1-1, 2.2.1-1ubuntu0.3, 2.9.1-3, 2.9.1-3ubuntu0.1+8 more	no fix listed	72
python-requestsrpm	2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8, 2.25.1-7.el9_2+1 more	0:2.20.0-5.el8_10, 0:2.25.1-9.el9	42

OSV records: DEBIAN-CVE-2024-35195 GHSA-9wx4-h78v-vm56 RHSA-2025:0012 RHSA-2025:7049 UBUNTU-CVE-2024-35195
Also known as: PYSEC-2026-1873, USN-8344-1

Charts affected

605 by stars

Chart

Latest

Affected images

Radar Score

ceph-csi-rbdwikimedia

0.1.13

1 of 6 See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2024-35195.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	requests@2.20.0	2.32.0

Open the chart page →

11,785

docker-hub-rate-limit-exporterwiremind

0.3.0

1 of 1 See more

docker-hub-rate-limit-exporter wiremind 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container image	Digest	Package	Fixed in
viadee/docker-hub-rate-limit-exporter :version-1.5	2e27e3b3ee56	requests@2.25.1	2.32.0

Open the chart page →

1,843

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	requests@2.31.0	2.32.0

Open the chart page →

5,548

powerdnsadminwitcom-gmbh

0.3.4

1 of 1 See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container image	Digest	Package	Fixed in
ngoduykhanh/powerdns-admin :v0.2.4	ba36ab196d3d	requests@2.24.0	2.32.0

Open the chart page →

2,643

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2024-35195.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	requests@2.28.2	2.32.0

Open the chart page →

1,838

Container images carrying it

658 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/zazukoians/qlever-server :v0.10.0	f10fd24b2290	python-pip@24.0+dfsg-1ubuntu1.3	24.0+dfsg-1ubuntu1.3+esm1	1
mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi :v1.35.7	6e43ba0bd009	requests@2.31.0	2.32.0	1
public.ecr.aws/perfectscale-io/kube-state-metrics :4.1.14-redhat	849e235e2d3e	python-requests@2.20.0-3.el8_8 requests@2.20.0	0:2.20.0-5.el8_10 2.32.0	1
public.ecr.aws/perfectscale-io/psc-exporter :v1.0.45-redhat	9083e60c38bc	python-requests@2.25.1-8.el9 requests@2.25.1	0:2.25.1-9.el9 2.32.0	1
public.ecr.aws/perfectscale-io/ubi9/ubi :9.5	d7c3def9252b	python-requests@2.25.1-8.el9 requests@2.25.1	0:2.25.1-9.el9 2.32.0	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	requests@2.22.0-2ubuntu1 requests@2.22.0	no fix listed 2.32.0	1
public.ecr.aws/v0r6c2e2/hive-metastore :latest	794b3bff9510	python-requests@2.25.1-8.el9 requests@2.25.1	0:2.25.1-9.el9 2.32.0	1
quay.io/ai-lab/llamacpp_python :latest	70d138997acd	python-requests@2.25.1-8.el9 requests@2.25.1	0:2.25.1-9.el9 2.32.0	1
quay.io/ansible/awx-operator :2.19.1	7302e0c8e5a7	python-requests@2.20.0-3.el8_8 requests@2.31.0	0:2.20.0-5.el8_10 2.32.0	1
quay.io/cephcsi/cephcsi :v3.5.1	28a674af1df2	requests@2.20.0	2.32.0	1
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	requests@2.28.0	2.32.0	1
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	python-requests@2.20.0-2.1.el8_1 requests@2.20.0	0:2.20.0-5.el8_10 2.32.0	1
quay.io/ctrontesting/iofog-controller :latest	10df27bc5560	python-requests@2.20.0-2.1.el8_1 requests@2.20.0	0:2.20.0-5.el8_10 2.32.0	1
quay.io/eformat/jenkins-agent-graalvm :latest	a3b9a07648b6	python-requests@2.20.0-2.1.el8_1 requests@2.20.0	0:2.20.0-5.el8_10 2.32.0	1
quay.io/everythingascode/apishift :v0.3.0	8fbbcd23b902	requests@2.25.1	2.32.0	1
quay.io/evl.ms/argocd-exporter :0.0.1	36ea8f34aa6b	requests@2.26.0	2.32.0	1
quay.io/fengyuanxing/zte_endogenous_security/kite-agent :V2.0.0	734808044936	requests@2.20.0	2.32.0	1
quay.io/fiware/orion-ld :1.10.0	b7ee7569a9a8	requests@2.20.0	2.32.0	1
quay.io/fiware/orion-ld :1.0.1	ea838e5b4051	python-requests@2.20.0-2.1.el8_1 requests@2.20.0	0:2.20.0-5.el8_10 2.32.0	1
quay.io/freeipa/freeipa-server :fedora-39-4.11.1	d422ee50c2c3	requests@2.28.2	2.32.0	1
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	requests@2.25.1	2.32.0	1
quay.io/jupyterhub/k8s-hub :3.2.1	2528c6e57587	requests@2.31.0	2.32.0	1
quay.io/kiali/kiali-operator :v2.32.0	96c5264d54ab	requests@2.31.0	2.32.0	1
quay.io/kiwigrid/k8s-sidecar :1.10.7	18feb3906286	requests@2.24.0	2.32.0	1
quay.io/kiwigrid/k8s-sidecar :1.15.6	1f025ae37b7b	requests@2.27.1	2.32.0	1
quay.io/kiwigrid/k8s-sidecar :1.21.0	710e23b489c5	requests@2.28.1	2.32.0	1
quay.io/kiwigrid/k8s-sidecar :1.15.1	a25886092fa4	requests@2.25.1	2.32.0	1
quay.io/kiwigrid/k8s-sidecar :1.25.2	cb4c638ffb1f	requests@2.31.0	2.32.0	1
quay.io/maximilianopizarro/custom-rhcl-console :v0.1.2	70bb0cabd653	requests@2.25.1	2.32.0	1
quay.io/maximilianopizarro/neuralbank-frontend :latest	5f4572ef6d6f	requests@2.25.1	2.32.0	1
quay.io/maximilianopizarro/neuroface-backend :v1.4.1	3194d46df0f9	requests@2.25.1	2.32.0	1
quay.io/maximilianopizarro/neuroface-backend :latest	cba71dc08c8a	requests@2.25.1	2.32.0	1
quay.io/maximilianopizarro/neuroface-frontend :v1.4.1	841b70cd1424	requests@2.25.1	2.32.0	1
quay.io/maximilianopizarro/neuroface-frontend :latest	dcf24040cc77	requests@2.25.1	2.32.0	1
quay.io/maximilianopizarro/nfl-wallet-webapp :1.0.1	3fead5702be7	requests@2.20.0	2.32.0	1
quay.io/maxiv/storageclass-router :0.4.1	60725dab588c	requests@2.31.0	2.32.0	1
quay.io/nird-toolkit/jupyterhub-server :20221215-e6aa80e	cae8c0622533	requests@2.28.1	2.32.0	1
quay.io/openshift/origin-jenkins-agent-base :latest	c241c971aef8	python-requests@2.20.0-3.el8_6 requests@2.20.0	0:2.20.0-5.el8_10 2.32.0	1
quay.io/opsmxpublic/awsgit :v2-openssh	0d21ba756f44	requests@2.26.0	2.32.0	1
quay.io/opsmxpublic/awsgit :v3-js	15a6faada3d4	requests@2.25.1	2.32.0	1
quay.io/opsmxpublic/ubi8-gate :isd-spin-2025.10.01-5c720954-202511260810	2b3554029737	requests@2.20.0	2.32.0	1
quay.io/opsmxpublic/ubi8-oes-audit-client :isd-spin-2025.10.01-cb1bfce-202511261037	32a5b1887eab	requests@2.20.0	2.32.0	1
quay.io/opsmxpublic/ubi8-oes-autopilot :isd-spin-2025.10.01-af26a30d4-202511261054	58bd0bcf72f9	requests@2.20.0	2.32.0	1
quay.io/opsmxpublic/ubi8-oes-datascience :isd-spin-2025.10.01-af26a30d4-202511261054	d8f66f4117fe	requests@2.25.1	2.32.0	1
quay.io/opsmxpublic/ubi8-oes-db :v3.0.0	89ee6493af89	python-requests@2.20.0-2.1.el8_1 requests@2.20.0	0:2.20.0-5.el8_10 2.32.0	1
quay.io/opsmxpublic/ubi8-oes-platform :isd-spin-2025.10.01-a7c191ec-202511261122	8ed603ab7417	requests@2.20.0	2.32.0	1
quay.io/opsmxpublic/ubi8-oes-ui :isd-spin-2025.10.01-e6f6f01-202512100640	5d934bb66884	requests@2.20.0	2.32.0	1
quay.io/redhat-ai-dev/chatbot :latest	59fe607dfdf2	python-requests@2.25.1-8.el9 requests@2.25.1	0:2.25.1-9.el9 2.32.0	1
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	python-requests@2.25.1-7.el9_2 requests@2.25.1	0:2.25.1-9.el9 2.32.0	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	python-requests@2.20.0-2.1.el8_1 requests@2.20.0	0:2.20.0-5.el8_10 2.32.0	1