psf vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20242
3. 20251
4. 20264

Newest CVEs

• CVE-2026-114134

  Black: GitHub Action installs unvalidated required-version from pyproject.toml

  psf · black

  High8.7
• CVE-2026-25645

  Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function

  psf · requests

  Medium4.4
• CVE-2026-32274

  Black: Arbitrary file writes from unsanitized user input in cache file name

  psf · black

  High8.7
• CVE-2026-31900

  Black's vulnerable version parsing leads to RCE in GitHub Action

  psf · black

  High8.7
• CVE-2024-47081

  Requests vulnerable to .netrc credentials leak via malicious URLs

  psf · requests

  Medium5.3
• CVE-2024-1682

  Unclaimed S3 Bucket Reference in psf/requests Documentation

  psf · psf/requests

  Medium4.3
• CVE-2024-35195

  Requests `Session` object does not verify requests after making first request with verify=False

  psf · requests

  Medium5.6
• CVE-2023-32681

  Unintended leak of Proxy-Authorization header in requests

  psf · requests

  Medium6.1