Requests 1 lifecycle
Current status
Requests 1 is currently in standard support.
Security: 12 tracked advisories affecting this line. Details below — lifecycle and vulnerability status are separate.
Official lifecycle source: Requests PyPI releases
- Support phase
- standard support
- End of life
- Not officially published
- Latest release
- 1.0.1
- Released
- 17 Dec 2012
At a glance
- Version line
- 1
- Initial release
- 17 Dec 2012
- Lifecycle phase
- standard support
- Latest stable
- 1.0.1
- Latest release date
- 17 Dec 2012
- EOL
- Not officially published
- Risk
- low
- Releases tracked
- 10
Lifecycle timeline
Phases from published LifecyclePeriod records. Missing phases are not inferred.
Release
17 Dec 2012
standard supportcurrent
17 Dec 2012 → —
Source: Requests PyPI releases
Requests 1 is currently in standard support.
Upgrade options
Newer supported Requests version lines from CompatHub lifecycle data. Compatibility and security context use existing evidence only.
You are on Requests 1
Supported
Supported upgrade options
- Requests 2Upgrade planner →Supported· 1 major version newer
Security
Advisories affecting Requests 1 (OSV.dev evidence). Known exploited status, due dates, and ransomware use from CISA KEV when matched.
- Known vulnerabilities
- 12
- Known exploited
- 0
- Highest CVSS
- —
- CVE-2024-47081PYSEC-2026-1872
Requests vulnerable to .netrc credentials leak via malicious URLs
- Affected:
- <2.32.4
- Fixed in:
- 2.32.4
- Source:
- OSV source · Advisory
- CVE-2024-35195PYSEC-2026-1873
Requests `Session` object does not verify requests after making first request with verify=False
- Affected:
- <2.32.0
- Fixed in:
- 2.32.0
- Source:
- OSV source · Advisory
- CVE-2026-25645PYSEC-2026-2275
- Affected:
- <2.33.0
- Fixed in:
- 2.33.0
- Source:
- OSV source · Advisory
- CVE-2026-25645GHSA-gc5v-m9x4-r6x2
Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function
- Affected:
- <2.33.0
- Fixed in:
- 2.33.0
- Source:
- OSV source · Advisory
- CVE-2024-47081GHSA-9hjg-9r4m-mvj7
Requests vulnerable to .netrc credentials leak via malicious URLs
- Affected:
- <2.32.4
- Fixed in:
- 2.32.4
- Source:
- OSV source · Advisory
- CVE-2024-35195GHSA-9wx4-h78v-vm56
Requests `Session` object does not verify requests after making first request with verify=False
- Affected:
- <2.32.0
- Fixed in:
- 2.32.0
- Source:
- OSV source · Advisory
- CVE-2014-1829GHSA-cfj3-7x9c-4p3h
Exposure of Sensitive Information to an Unauthorized Actor in Requests
- Affected:
- <2.3.0
- Fixed in:
- 2.3.0
- Source:
- OSV source · Advisory
- CVE-2014-1830GHSA-652x-xj99-gmcc
Exposure of Sensitive Information to an Unauthorized Actor in Requests
- Affected:
- <2.3.0
- Fixed in:
- 2.3.0
- Source:
- OSV source · Advisory
- CVE-2018-18074GHSA-x84v-xcm2-53pg
Insufficiently Protected Credentials in Requests
- Affected:
- <2.20.0
- Fixed in:
- 2.20.0
- Source:
- OSV source · Advisory
- CVE-2018-18074PYSEC-2018-28
- Affected:
- <2.20.0
- Fixed in:
- 2.20.0
- Source:
- OSV source · Advisory
- CVE-2014-1829PYSEC-2014-13
- Affected:
- <2.3.0
- Fixed in:
- 2.3.0
- Source:
- OSV source · Advisory
- CVE-2014-1830PYSEC-2014-14
- Affected:
- <2.3.0
- Fixed in:
- 2.3.0
- Source:
- OSV source · Advisory
Latest release
Previous releases
1.0.2
17 Dec 2012
1.0.3
18 Dec 2012
1.0.0
17 Dec 2012
Release history
10 concrete releases tracked for this line.
| Version | Release date | Channel | Source |
|---|---|---|---|
| 1.0.0 | 17 Dec 2012 | stable | Source |
| 1.0.1 | 17 Dec 2012 | stable | Source |
| 1.0.2 | 17 Dec 2012 | stable | Source |
| 1.0.3 | 18 Dec 2012 | stable | Source |
| 1.0.4 | 23 Dec 2012 | stable | Source |
| 1.1.0 | 10 Jan 2013 | stable | Source |
| 1.2.0 | 31 Mar 2013 | stable | Source |
| 1.2.1 | 20 May 2013 | stable | Source |
| 1.2.2 | 21 May 2013 | stable | Source |
| 1.2.3 | 25 May 2013 | stable | Source |
Release activity
- Total releases
- 10
- Last 30 days
- 0
- Last 90 days
- 0
- Avg. interval
- ~18 days
- Most recent
- 17 Dec 2012
Should I use this version?
Suitable for new deployments
Requests 1 is currently supported (standard support).
Version comparison
Compact comparison against the nearest relevant release lines.
Compatibility
Evidence-backed compatibility results involving Requests 1. Only combinations CompatHub can evaluate from upstream sources are listed.
Compatible targets
Sources
Where this information comes from.
Lifecycle sources
- Requests PyPI releasesfirst party · high confidence
Official source: https://pypi.org/project/requests/
Last verified 2 Sept 2026
- OSV.devfirst party
Official source: https://osv.dev
Verification time not recorded
- NVD (NIST)first party
Official source: https://nvd.nist.gov
Verification time not recorded
- CISA Known Exploited Vulnerabilitiesfirst party
Official source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Verification time not recorded
Release sources
- Requests PyPI releasesfirst party · high confidence
Official source: https://pypi.org/project/requests/
Last verified 2 Sept 2026
Data coverage
Last checked = last successful upstream check. Latest source update = when upstream content last changed.
- Releases tracked
- 10
- Lifecycle periods
- 1
- EOL
- Not officially published
- Provenance records
- 2
- Data last checked
- 2 Sept 2026
- Latest source update
- 2 Sept 2026
EOL: Not officially published