CVE-2024-35195
MediumAdvisory
Published 20 May 2024In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.6
- base score, highest
- EPSS
- 0.003
- 27th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 603
- of 17,790 indexed, latest versions
- Container images
- 655
- deployed by those charts
- Fix available
- 3 of 4
- affected packages
Requests `Session` object does not verify requests after making first request with verify=False
Carried by container images the latest versions of 603 of 17,790 indexed charts deploy, on 655 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| requestspypi | 2.2.1, 2.6.0, 2.9.1, 2.10.0+22 more | 2.32.0 | 611 |
| python-pipdeb | 1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+23 more | 22.0.2+dfsg-1ubuntu0.7+esm1, 24.0+dfsg-1ubuntu1.3+esm1 | 106 |
| requestsdeb | 2.2.1-1, 2.2.1-1ubuntu0.3, 2.9.1-3, 2.9.1-3ubuntu0.1+8 more | no fix listed | 71 |
| python-requestsrpm | 2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8, 2.25.1-7.el9_2+1 more | 0:2.20.0-5.el8_10, 0:2.25.1-9.el9 | 42 |
- OSV records
- DEBIAN-CVE-2024-35195GHSA-9wx4-h78v-vm56RHSA-2025:0012RHSA-2025:7049UBUNTU-CVE-2024-35195
- Also known as
- PYSEC-2026-1873, USN-8344-1
Charts affected
603 by stars
Container images carrying it
655 by charts deploying them
A fixed version is listed for 3 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ibmcom/ | d28bf361327a | python-requests requests | 0:2.20.0-5.el8_10 2.32.0 | 1 |
| ihatemoney/ | 457fda1feb32 | requests | 2.32.0 | 1 |
| improwised/ | 97280b55cbd4 | requests | 2.32.0 | 1 |
| intel/ | aa8f5483a2ef | python-pip requests requests | no fix listed no fix listed 2.32.0 | 1 |
| iosifache/ | 85df3f04b5da | requests | 2.32.0 | 1 |
| istio/ | 6668bcf42ef0 | requests | 2.32.0 | 1 |
| istio/ | 328b237e4fb1 | requests | 2.32.0 | 1 |
| istio/ | 0a7f02b2c7c9 | requests | 2.32.0 | 1 |
| jaedb/ | 048cfbf58d57 | requests requests | no fix listed 2.32.0 | 1 |
| jertel/ | 4dcc0ef93efc | requests | 2.32.0 | 1 |
| jmferrer/ | 030f68ec6998 | requests | 2.32.0 | 1 |
| jordan/ | f75025fe8ea8 | requests requests | no fix listed 2.32.0 | 1 |
| josh5/ | 4d49c4816260 | python-pip requests | 22.0.2+dfsg-1ubuntu0.7+esm1 2.32.0 | 1 |
| juicedata/ | 95008ba63318 | requests requests | 2.32.0 no fix listed | 1 |
| juicedata/ | d915e899e322 | requests | 2.32.0 | 1 |
| julb/ | 837c4038a0dd | requests | 2.32.0 | 1 |
| julb/ | d7d8836366ad | requests | 2.32.0 | 1 |
| jupyterhub/ | 3974ba945e65 | python-pip | 24.0+dfsg-1ubuntu1.3+esm1 | 1 |
| jupyterhub/ | 5a0ceed1300a | requests | 2.32.0 | 1 |
| jupyterhub/ | b6b4a1a34bf0 | python-pip requests | no fix listed 2.32.0 | 1 |
| jupyterhub/ | e4770285aaf7 | python-pip requests | no fix listed 2.32.0 | 1 |
| jupyterhub/ | 8e4778efec8e | requests | 2.32.0 | 1 |
| jupyterhub/ | e3e6f3051df8 | requests | 2.32.0 | 1 |
| keitaro/ | 5bf1a45f45c1 | requests | 2.32.0 | 1 |
| kelvinsp/ | cd33e6db2a59 | requests | 2.32.0 | 1 |
| kennethreitz/ | 599fe5e50731 | python-pip | no fix listed | 1 |
| kfirfer/ | cf81d0959256 | requests | 2.32.0 | 1 |
| kfirfer/ | e88cfcec5c93 | requests | 2.32.0 | 1 |
| kfirfer/ | 81e5c4e5d70e | requests | 2.32.0 | 1 |
| kfirfer/ | 461331bd838e | requests | 2.32.0 | 1 |
| kfserving/ | f322d6ffdfa3 | requests | 2.32.0 | 1 |
| kinseii/ | 7160eb143728 | requests requests | no fix listed 2.32.0 | 1 |
| kiwigrid/ | 3e86186656d3 | requests | 2.32.0 | 1 |
| kiwigrid/ | 65095a82d4a1 | requests | 2.32.0 | 1 |
| kiwigrid/ | 6eb52513d59e | requests | 2.32.0 | 1 |
| kiwigrid/ | 89739be9ff38 | requests | 2.32.0 | 1 |
| kiwigrid/ | 899ccd0b1f54 | requests | 2.32.0 | 1 |
| kiwigrid/ | af151f677a63 | requests | 2.32.0 | 1 |
| kiwigrid/ | e271016441af | requests | 2.32.0 | 1 |
| knspar/ | 09499d2dc91a | python-pip | 24.0+dfsg-1ubuntu1.3+esm1 | 1 |
| kobotoolbox/ | b15679454415 | requests | 2.32.0 | 1 |
| kobotoolbox/ | bcacc01bccd4 | requests | 2.32.0 | 1 |
| kocolosk/ | 6effb982154e | requests | 2.32.0 | 1 |
| kong/ | a6ac46531193 | python-pip | 22.0.2+dfsg-1ubuntu0.7+esm1 | 1 |
| kserve/ | 63ea05e73842 | requests | 2.32.0 | 1 |
| kubeflownotebookswg/ | d762690e21c1 | requests | 2.32.0 | 1 |
| kubeflownotebookswg/ | 0876fef1973b | requests | 2.32.0 | 1 |
| kubeflownotebookswg/ | 7299fa94db15 | requests | 2.32.0 | 1 |
| kubegems/ | 10abb76892b8 | requests | 2.32.0 | 1 |
| kubesphere/ | 378f49ec9c44 | requests | 2.32.0 | 1 |