Sploitus

17 exploited vulnerabilities in Requests

Vulnerabilities with publicly known exploits

Vendors
Request, Hugging Face, Pypi, Mindsdb, Autogpt, Unknown
With known exploits
17
Affected Python Requests versions
< 2.20.0, 2.31.0

Vulnerabilities with exploits

Highest CVSS first — 3 of these already have exploit code on Sploitus

CVE-2026-2654
CVSS 9.8 CRITICAL 2026-02-18
CVE-2021-29476
CVSS 9.8 CRITICAL 2021-04-27FIX AVAILABLE
CVE-2023-38699
CVSS 9.1 CRITICAL 2023-08-01FIX AVAILABLE
CVE-2025-31491
CVSS 8.6 HIGH 2025-04-14FIX AVAILABLE
CVE-2026-35486
CVSS 7.5 HIGH 2026-04-07FIX AVAILABLE
CVE-2025-0454
CVSS 7.5 HIGH 2025-03-20FIX AVAILABLE
CVE-2018-18074 2 exploits
CVSS 7.5 HIGH 2018-06-29FIX AVAILABLE
Exploit for Deserialization of Untrusted Data in PyyamlPackj - Large-Scale Security Analysis Platform To Detect Malicious/Risky Open-Source Packages
CVE-2026-39362
CVSS 7.1 HIGH 2026-04-08FIX AVAILABLE
CVE-2014-1830
CVSS 6.9 MEDIUM 2014-09-19FIX AVAILABLE
CVE-2014-1829
CVSS 6.9 MEDIUM 2014-09-19FIX AVAILABLE
CVE-2025-67743
CVSS 6.5 MEDIUM 2025-12-23FIX AVAILABLE
CVE-2025-0184
CVSS 6.5 MEDIUM 2025-03-20FIX AVAILABLE
CVE-2023-32681 1 exploit
CVSS 6.1 MEDIUM 2023-05-22FIX AVAILABLE
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Python Requests
CVE-2026-34981
CVSS 5.8 MEDIUM 2026-04-06FIX AVAILABLE
CVE-2024-35195
CVSS 5.6 MEDIUM 2024-05-20FIX AVAILABLE
CVE-2026-25645
CVSS 5.5 MEDIUM 2026-03-25FIX AVAILABLE
CVE-2024-47081 1 exploit
CVSS 5.4 MEDIUM 2024-01-01
📄 PSF Request Library Credential Leak