https://seclists.org/oss-sec/2025/q2/212: CVE-2024-47081: Netrc cdential leak in PSF quests library
Published Jun 4, 2025
·Updated
Affected Software
1 affected component
Python Software Foundation requests
Frequently Asked Questions
1
What is CVE-2024-47081?
CVE-2024-47081 is a vulnerability in the Python Software Foundation requests library that leads to the leakage of credentials stored in .netrc files.
2
What is the severity of CVE-2024-47081?
The severity of CVE-2024-47081 is currently under analysis, but it is considered a significant security risk due to potential credential exposure.
3
How do I fix CVE-2024-47081?
To mitigate CVE-2024-47081, users should avoid using .netrc files for authentication in applications that utilize the requests library.
4
What systems are affected by CVE-2024-47081?
CVE-2024-47081 affects any application or system that uses the Python Software Foundation requests library for HTTP requests.
5
Is there a workaround for CVE-2024-47081?
There is no official workaround for CVE-2024-47081, but users may consider implementing alternative authentication methods.