CompatHub
Check EOL
Requests logo

Requests 2 lifecycle

Current status

unknownmedium

Requests 2 has no published vendor calendar support schedule in CompatHub's sources. Release history and dependency requirements are recorded from package metadata without inventing support commitments.

Security: 15 tracked advisories affecting this line. Details below — lifecycle and vulnerability status are separate.

Official lifecycle source: Requests PyPI releases

Support phase
unknown
End of life
Not officially published
Latest release
2.34.2
Released
14 May 2026

At a glance

Version line
2
Initial release
15 Nov 2013
Lifecycle phase
unknown
Latest stable
2.34.2
Latest release date
14 May 2026
EOL
Not officially published
Risk
medium
Releases tracked
83

Lifecycle timeline

Phases from published LifecyclePeriod records. Missing phases are not inferred.

  1. Release

    15 Nov 2013

  2. unknowncurrent

    15 Nov 2013 → —

    Source: Requests PyPI releases

Requests 2 has no published vendor calendar support schedule in CompatHub's sources. Release history and dependency requirements are recorded from package metadata without inventing support commitments.

Security

Advisories affecting Requests 2 (OSV.dev evidence). Known exploited status, due dates, and ransomware use from CISA KEV when matched.

Known vulnerabilities
15
Known exploited
0
Highest CVSS
—
  • CVE-2024-47081PYSEC-2026-1872

    Requests vulnerable to .netrc credentials leak via malicious URLs

    Affected:
    <2.32.4
    Fixed in:
    2.32.4
    Source:
    OSV source · Advisory
  • CVE-2024-35195PYSEC-2026-1873

    Requests `Session` object does not verify requests after making first request with verify=False

    Affected:
    <2.32.0
    Fixed in:
    2.32.0
    Source:
    OSV source · Advisory
  • CVE-2026-25645PYSEC-2026-2275
    Affected:
    <2.33.0
    Fixed in:
    2.33.0
    Source:
    OSV source · Advisory
  • CVE-2026-25645GHSA-gc5v-m9x4-r6x2

    Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function

    Affected:
    <2.33.0
    Fixed in:
    2.33.0
    Source:
    OSV source · Advisory
  • CVE-2024-47081GHSA-9hjg-9r4m-mvj7

    Requests vulnerable to .netrc credentials leak via malicious URLs

    Affected:
    <2.32.4
    Fixed in:
    2.32.4
    Source:
    OSV source · Advisory
  • CVE-2024-35195GHSA-9wx4-h78v-vm56

    Requests `Session` object does not verify requests after making first request with verify=False

    Affected:
    <2.32.0
    Fixed in:
    2.32.0
    Source:
    OSV source · Advisory
  • CVE-2023-32681PYSEC-2023-74
    Affected:
    >=2.3.0,<2.31.0
    Fixed in:
    2.31.0
    Source:
    OSV source · Advisory
  • CVE-2023-32681GHSA-j8r2-6x86-q33q

    Unintended leak of Proxy-Authorization header in requests

    Affected:
    >=2.3.0,<2.31.0
    Fixed in:
    2.31.0
    Source:
    OSV source · Advisory
  • CVE-2014-1829GHSA-cfj3-7x9c-4p3h

    Exposure of Sensitive Information to an Unauthorized Actor in Requests

    Affected:
    <2.3.0
    Fixed in:
    2.3.0
    Source:
    OSV source · Advisory
  • CVE-2014-1830GHSA-652x-xj99-gmcc

    Exposure of Sensitive Information to an Unauthorized Actor in Requests

    Affected:
    <2.3.0
    Fixed in:
    2.3.0
    Source:
    OSV source · Advisory
  • CVE-2015-2296GHSA-pg2w-x9wp-vw92

    Python Requests Session Fixation

    Affected:
    >=2.1.0,<2.6.0
    Fixed in:
    2.6.0
    Source:
    OSV source · Advisory
  • CVE-2018-18074GHSA-x84v-xcm2-53pg

    Insufficiently Protected Credentials in Requests

    Affected:
    <2.20.0
    Fixed in:
    2.20.0
    Source:
    OSV source · Advisory
  • CVE-2018-18074PYSEC-2018-28
    Affected:
    <2.20.0
    Fixed in:
    2.20.0
    Source:
    OSV source · Advisory
  • CVE-2015-2296PYSEC-2015-17
    Affected:
    >=2.1.0,<2.6.0
    Fixed in:
    2.6.0
    Source:
    OSV source · Advisory
  • CVE-2014-1829PYSEC-2014-13
    Affected:
    <2.3.0
    Fixed in:
    2.3.0
    Source:
    OSV source · Advisory

Latest release

2.34.2

Released 14 May 2026 · stable

https://pypi.org/pypi/requests/2.34.2/json

Previous releases

  • 2.34.1

    13 May 2026

  • 2.34.0

    11 May 2026

  • 2.33.1

    30 Mar 2026

Release history

83 concrete releases tracked for this line.

VersionRelease dateChannelSource
2.13.024 Jan 2017stableSource
2.12.518 Jan 2017stableSource
2.12.414 Dec 2016stableSource
2.12.31 Dec 2016stableSource
2.12.230 Nov 2016stableSource
2.12.116 Nov 2016stableSource
2.12.015 Nov 2016stableSource
2.11.117 Aug 2016stableSource
2.11.08 Aug 2016stableSource
2.10.029 Apr 2016stableSource
2.9.229 Apr 2016stableSource
2.9.121 Dec 2015stableSource
2.9.015 Dec 2015stableSource
2.8.113 Oct 2015stableSource
2.8.06 Oct 2015stableSource
2.7.03 May 2015stableSource
2.6.223 Apr 2015stableSource
2.6.123 Apr 2015stableSource
2.6.014 Mar 2015stableSource
2.5.324 Feb 2015stableSource
2.5.223 Feb 2015stableSource
2.5.123 Dec 2014stableSource
2.5.01 Dec 2014stableSource
2.4.36 Oct 2014stableSource
2.4.25 Oct 2014stableSource

Release activity

Total releases
83
Last 30 days
0
Last 90 days
0
Avg. interval
~84 days
Most recent
14 May 2026

Should I use this version?

Lifecycle status unclear

Requests 2 has no published vendor calendar support schedule. CompatHub does not invent support commitments from release history alone.

Version comparison

Compact comparison against the nearest relevant release lines.

21
Statusunknownunknown
Latest release2.34.21.2.3
EOLNot publishedNot published
Riskmediummedium

Compatibility

Evidence-backed compatibility results involving Requests 2. Only combinations CompatHub can evaluate from upstream sources are listed.

Compatible targets

Open Compatibility Explorer →

Sources

Where this information comes from.

Lifecycle sources

Release sources

Data coverage

Last checked = last successful upstream check. Latest source update = when upstream content last changed.

Releases tracked
83
Lifecycle periods
1
EOL
Not officially published
Provenance records
2
Data last checked
2 Sept 2026
Latest source update
2 Sept 2026

EOL: Not officially published

Other Requests versions