CompatHub
Check EOL
Requests logo

Requests 2 lifecycle

Current status

standard supportlow

Requests 2 is currently in standard support.

Security: 15 tracked advisories affecting this line. Details below — lifecycle and vulnerability status are separate.

Official lifecycle source: Requests PyPI releases

Support phase
standard support
End of life
Not officially published
Latest release
2.4.0
Released
29 Aug 2014

At a glance

Version line
2
Initial release
15 Nov 2013
Lifecycle phase
standard support
Latest stable
2.4.0
Latest release date
29 Aug 2014
EOL
Not officially published
Risk
low
Releases tracked
83

Lifecycle timeline

Phases from published LifecyclePeriod records. Missing phases are not inferred.

  1. Release

    15 Nov 2013

  2. standard supportcurrent

    15 Nov 2013 → —

    Source: Requests PyPI releases

Requests 2 is currently in standard support.

Security

Advisories affecting Requests 2 (OSV.dev evidence). Known exploited status, due dates, and ransomware use from CISA KEV when matched.

Known vulnerabilities
15
Known exploited
0
Highest CVSS
—
  • CVE-2024-47081PYSEC-2026-1872

    Requests vulnerable to .netrc credentials leak via malicious URLs

    Affected:
    <2.32.4
    Fixed in:
    2.32.4
    Source:
    OSV source · Advisory
  • CVE-2024-35195PYSEC-2026-1873

    Requests `Session` object does not verify requests after making first request with verify=False

    Affected:
    <2.32.0
    Fixed in:
    2.32.0
    Source:
    OSV source · Advisory
  • CVE-2026-25645PYSEC-2026-2275
    Affected:
    <2.33.0
    Fixed in:
    2.33.0
    Source:
    OSV source · Advisory
  • CVE-2026-25645GHSA-gc5v-m9x4-r6x2

    Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function

    Affected:
    <2.33.0
    Fixed in:
    2.33.0
    Source:
    OSV source · Advisory
  • CVE-2024-47081GHSA-9hjg-9r4m-mvj7

    Requests vulnerable to .netrc credentials leak via malicious URLs

    Affected:
    <2.32.4
    Fixed in:
    2.32.4
    Source:
    OSV source · Advisory
  • CVE-2024-35195GHSA-9wx4-h78v-vm56

    Requests `Session` object does not verify requests after making first request with verify=False

    Affected:
    <2.32.0
    Fixed in:
    2.32.0
    Source:
    OSV source · Advisory
  • CVE-2023-32681PYSEC-2023-74
    Affected:
    >=2.3.0,<2.31.0
    Fixed in:
    2.31.0
    Source:
    OSV source · Advisory
  • CVE-2023-32681GHSA-j8r2-6x86-q33q

    Unintended leak of Proxy-Authorization header in requests

    Affected:
    >=2.3.0,<2.31.0
    Fixed in:
    2.31.0
    Source:
    OSV source · Advisory
  • CVE-2014-1829GHSA-cfj3-7x9c-4p3h

    Exposure of Sensitive Information to an Unauthorized Actor in Requests

    Affected:
    <2.3.0
    Fixed in:
    2.3.0
    Source:
    OSV source · Advisory
  • CVE-2014-1830GHSA-652x-xj99-gmcc

    Exposure of Sensitive Information to an Unauthorized Actor in Requests

    Affected:
    <2.3.0
    Fixed in:
    2.3.0
    Source:
    OSV source · Advisory
  • CVE-2015-2296GHSA-pg2w-x9wp-vw92

    Python Requests Session Fixation

    Affected:
    >=2.1.0,<2.6.0
    Fixed in:
    2.6.0
    Source:
    OSV source · Advisory
  • CVE-2018-18074GHSA-x84v-xcm2-53pg

    Insufficiently Protected Credentials in Requests

    Affected:
    <2.20.0
    Fixed in:
    2.20.0
    Source:
    OSV source · Advisory
  • CVE-2018-18074PYSEC-2018-28
    Affected:
    <2.20.0
    Fixed in:
    2.20.0
    Source:
    OSV source · Advisory
  • CVE-2015-2296PYSEC-2015-17
    Affected:
    >=2.1.0,<2.6.0
    Fixed in:
    2.6.0
    Source:
    OSV source · Advisory
  • CVE-2014-1829PYSEC-2014-13
    Affected:
    <2.3.0
    Fixed in:
    2.3.0
    Source:
    OSV source · Advisory

Latest release

2.4.0

Released 29 Aug 2014 · stable

https://pypi.org/pypi/requests/2.4.0/json

Previous releases

  • 2.4.1

    9 Sept 2014

  • 2.4.2

    5 Oct 2014

  • 2.3.0

    16 May 2014

Release history

83 concrete releases tracked for this line.

VersionRelease dateChannelSource
2.4.029 Aug 2014stableSource
2.4.19 Sept 2014stableSource
2.4.25 Oct 2014stableSource
2.4.36 Oct 2014stableSource
2.5.01 Dec 2014stableSource
2.0.015 Nov 2013stableSource
2.0.115 Nov 2013stableSource
2.1.05 Dec 2013stableSource
2.2.09 Jan 2014stableSource
2.2.123 Jan 2014stableSource
2.5.223 Feb 2015stableSource
2.5.324 Feb 2015stableSource
2.6.014 Mar 2015stableSource
2.6.123 Apr 2015stableSource
2.6.223 Apr 2015stableSource
2.7.03 May 2015stableSource
2.8.06 Oct 2015stableSource
2.8.113 Oct 2015stableSource
2.9.015 Dec 2015stableSource
2.9.121 Dec 2015stableSource
2.9.229 Apr 2016stableSource
2.10.029 Apr 2016stableSource
2.11.08 Aug 2016stableSource
2.11.117 Aug 2016stableSource
2.3.016 May 2014stableSource

Release activity

Total releases
83
Last 30 days
0
Last 90 days
0
Avg. interval
~84 days
Most recent
29 Aug 2014

Should I use this version?

Suitable for new deployments

Requests 2 is currently supported (standard support).

Version comparison

Compact comparison against the nearest relevant release lines.

21
Statusstandard supportstandard support
Latest release2.3.01.0.0
EOLNot publishedNot published
Risklowlow

Compatibility

Evidence-backed compatibility results involving Requests 2. Only combinations CompatHub can evaluate from upstream sources are listed.

Compatible targets

Open Compatibility Explorer →

Sources

Where this information comes from.

Lifecycle sources

Release sources

Data coverage

Last checked = last successful upstream check. Latest source update = when upstream content last changed.

Releases tracked
83
Lifecycle periods
1
EOL
Not officially published
Provenance records
2
Data last checked
2 Sept 2026
Latest source update
2 Sept 2026

EOL: Not officially published

Other Requests versions