Requests 2 lifecycle
Current status
Requests 2 has no published vendor calendar support schedule in CompatHub's sources. Release history and dependency requirements are recorded from package metadata without inventing support commitments.
Security: 15 tracked advisories affecting this line. Details below — lifecycle and vulnerability status are separate.
Official lifecycle source: Requests PyPI releases
- Support phase
- unknown
- End of life
- Not officially published
- Latest release
- 2.34.2
- Released
- 14 May 2026
At a glance
- Version line
- 2
- Initial release
- 15 Nov 2013
- Lifecycle phase
- unknown
- Latest stable
- 2.34.2
- Latest release date
- 14 May 2026
- EOL
- Not officially published
- Risk
- medium
- Releases tracked
- 83
Lifecycle timeline
Phases from published LifecyclePeriod records. Missing phases are not inferred.
Release
15 Nov 2013
unknowncurrent
15 Nov 2013 → —
Source: Requests PyPI releases
Requests 2 has no published vendor calendar support schedule in CompatHub's sources. Release history and dependency requirements are recorded from package metadata without inventing support commitments.
Security
Advisories affecting Requests 2 (OSV.dev evidence). Known exploited status, due dates, and ransomware use from CISA KEV when matched.
- Known vulnerabilities
- 15
- Known exploited
- 0
- Highest CVSS
- —
- CVE-2024-47081PYSEC-2026-1872
Requests vulnerable to .netrc credentials leak via malicious URLs
- Affected:
- <2.32.4
- Fixed in:
- 2.32.4
- Source:
- OSV source · Advisory
- CVE-2024-35195PYSEC-2026-1873
Requests `Session` object does not verify requests after making first request with verify=False
- Affected:
- <2.32.0
- Fixed in:
- 2.32.0
- Source:
- OSV source · Advisory
- CVE-2026-25645PYSEC-2026-2275
- Affected:
- <2.33.0
- Fixed in:
- 2.33.0
- Source:
- OSV source · Advisory
- CVE-2026-25645GHSA-gc5v-m9x4-r6x2
Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function
- Affected:
- <2.33.0
- Fixed in:
- 2.33.0
- Source:
- OSV source · Advisory
- CVE-2024-47081GHSA-9hjg-9r4m-mvj7
Requests vulnerable to .netrc credentials leak via malicious URLs
- Affected:
- <2.32.4
- Fixed in:
- 2.32.4
- Source:
- OSV source · Advisory
- CVE-2024-35195GHSA-9wx4-h78v-vm56
Requests `Session` object does not verify requests after making first request with verify=False
- Affected:
- <2.32.0
- Fixed in:
- 2.32.0
- Source:
- OSV source · Advisory
- CVE-2023-32681PYSEC-2023-74
- Affected:
- >=2.3.0,<2.31.0
- Fixed in:
- 2.31.0
- Source:
- OSV source · Advisory
- CVE-2023-32681GHSA-j8r2-6x86-q33q
Unintended leak of Proxy-Authorization header in requests
- Affected:
- >=2.3.0,<2.31.0
- Fixed in:
- 2.31.0
- Source:
- OSV source · Advisory
- CVE-2014-1829GHSA-cfj3-7x9c-4p3h
Exposure of Sensitive Information to an Unauthorized Actor in Requests
- Affected:
- <2.3.0
- Fixed in:
- 2.3.0
- Source:
- OSV source · Advisory
- CVE-2014-1830GHSA-652x-xj99-gmcc
Exposure of Sensitive Information to an Unauthorized Actor in Requests
- Affected:
- <2.3.0
- Fixed in:
- 2.3.0
- Source:
- OSV source · Advisory
- CVE-2015-2296GHSA-pg2w-x9wp-vw92
Python Requests Session Fixation
- Affected:
- >=2.1.0,<2.6.0
- Fixed in:
- 2.6.0
- Source:
- OSV source · Advisory
- CVE-2018-18074GHSA-x84v-xcm2-53pg
Insufficiently Protected Credentials in Requests
- Affected:
- <2.20.0
- Fixed in:
- 2.20.0
- Source:
- OSV source · Advisory
- CVE-2018-18074PYSEC-2018-28
- Affected:
- <2.20.0
- Fixed in:
- 2.20.0
- Source:
- OSV source · Advisory
- CVE-2015-2296PYSEC-2015-17
- Affected:
- >=2.1.0,<2.6.0
- Fixed in:
- 2.6.0
- Source:
- OSV source · Advisory
- CVE-2014-1829PYSEC-2014-13
- Affected:
- <2.3.0
- Fixed in:
- 2.3.0
- Source:
- OSV source · Advisory
Latest release
Previous releases
2.34.1
13 May 2026
2.34.0
11 May 2026
2.33.1
30 Mar 2026
Release history
83 concrete releases tracked for this line.
| Version | Release date | Channel | Source |
|---|---|---|---|
| 2.21.0 | 10 Dec 2018 | stable | Source |
| 2.20.1 | 8 Nov 2018 | stable | Source |
| 2.20.0 | 18 Oct 2018 | stable | Source |
| 2.19.1 | 14 Jun 2018 | stable | Source |
| 2.19.0 | 12 Jun 2018 | stable | Source |
| 2.18.4 | 15 Aug 2017 | stable | Source |
| 2.18.3 | 2 Aug 2017 | stable | Source |
| 2.18.2 | 25 Jul 2017 | stable | Source |
| 2.18.1 | 14 Jun 2017 | stable | Source |
| 2.18.0 | 14 Jun 2017 | stable | Source |
| 2.17.3 | 29 May 2017 | stable | Source |
| 2.17.2 | 29 May 2017 | stable | Source |
| 2.17.1 | 29 May 2017 | stable | Source |
| 2.17.0 | 29 May 2017 | stable | Source |
| 2.16.5 | 28 May 2017 | stable | Source |
| 2.16.4 | 27 May 2017 | stable | Source |
| 2.16.3 | 27 May 2017 | stable | Source |
| 2.16.2 | 27 May 2017 | stable | Source |
| 2.16.1 | 27 May 2017 | stable | Source |
| 2.16.0 | 27 May 2017 | stable | Source |
| 2.15.1 | 27 May 2017 | stable | Source |
| 2.15.0 | — | stable | Source |
| 2.14.2 | 10 May 2017 | stable | Source |
| 2.14.1 | 9 May 2017 | stable | Source |
| 2.14.0 | 9 May 2017 | stable | Source |
Release activity
- Total releases
- 83
- Last 30 days
- 0
- Last 90 days
- 0
- Avg. interval
- ~84 days
- Most recent
- 14 May 2026
Should I use this version?
Lifecycle status unclear
Requests 2 has no published vendor calendar support schedule. CompatHub does not invent support commitments from release history alone.
Version comparison
Compact comparison against the nearest relevant release lines.
Compatibility
Evidence-backed compatibility results involving Requests 2. Only combinations CompatHub can evaluate from upstream sources are listed.
Compatible targets
Sources
Where this information comes from.
Lifecycle sources
- Requests PyPI releasesfirst party · high confidence
Official source: https://pypi.org/project/requests/
Last verified 2 Sept 2026
- OSV.devfirst party
Official source: https://osv.dev
Verification time not recorded
- NVD (NIST)first party
Official source: https://nvd.nist.gov
Verification time not recorded
- CISA Known Exploited Vulnerabilitiesfirst party
Official source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Verification time not recorded
Release sources
- Requests PyPI releasesfirst party · high confidence
Official source: https://pypi.org/project/requests/
Last verified 2 Sept 2026
Data coverage
Last checked = last successful upstream check. Latest source update = when upstream content last changed.
- Releases tracked
- 83
- Lifecycle periods
- 1
- EOL
- Not officially published
- Provenance records
- 2
- Data last checked
- 2 Sept 2026
- Latest source update
- 2 Sept 2026
EOL: Not officially published
