Requests 2 lifecycle

Current status

unknownmedium

Requests 2 has no published vendor calendar support schedule in CompatHub's sources. Release history and dependency requirements are recorded from package metadata without inventing support commitments.

Security: 15 tracked advisories affecting this line. Details below — lifecycle and vulnerability status are separate.

Official lifecycle source: Requests PyPI releases

Support phase: unknown
End of life: Not officially published
Latest release: 2.34.2
Released: 14 May 2026

At a glance

Version line: 2
Initial release: 15 Nov 2013
Lifecycle phase: unknown
Latest stable: 2.34.2
Latest release date: 14 May 2026
EOL: Not officially published
Risk: medium
Releases tracked: 83

Lifecycle timeline

Phases from published LifecyclePeriod records. Missing phases are not inferred.

Release
15 Nov 2013
unknowncurrent
15 Nov 2013 → —
Source: Requests PyPI releases

Security

Advisories affecting Requests 2 (OSV.dev evidence). Known exploited status, due dates, and ransomware use from CISA KEV when matched.

Known vulnerabilities: 15
Known exploited: 0
Highest CVSS: —

CVE-2024-47081PYSEC-2026-1872
Requests vulnerable to .netrc credentials leak via malicious URLs
Affected:
<2.32.4
Fixed in:
2.32.4
Source:
OSV source · Advisory
CVE-2024-35195PYSEC-2026-1873
Requests `Session` object does not verify requests after making first request with verify=False
Affected:
<2.32.0
Fixed in:
2.32.0
Source:
OSV source · Advisory
CVE-2026-25645PYSEC-2026-2275
Affected:
<2.33.0
Fixed in:
2.33.0
Source:
OSV source · Advisory
CVE-2026-25645GHSA-gc5v-m9x4-r6x2
Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function
Affected:
<2.33.0
Fixed in:
2.33.0
Source:
OSV source · Advisory
CVE-2024-47081GHSA-9hjg-9r4m-mvj7
Requests vulnerable to .netrc credentials leak via malicious URLs
Affected:
<2.32.4
Fixed in:
2.32.4
Source:
OSV source · Advisory
CVE-2024-35195GHSA-9wx4-h78v-vm56
Requests `Session` object does not verify requests after making first request with verify=False
Affected:
<2.32.0
Fixed in:
2.32.0
Source:
OSV source · Advisory
CVE-2023-32681PYSEC-2023-74
Affected:
>=2.3.0,<2.31.0
Fixed in:
2.31.0
Source:
OSV source · Advisory
CVE-2023-32681GHSA-j8r2-6x86-q33q
Unintended leak of Proxy-Authorization header in requests
Affected:
>=2.3.0,<2.31.0
Fixed in:
2.31.0
Source:
OSV source · Advisory
CVE-2014-1829GHSA-cfj3-7x9c-4p3h
Exposure of Sensitive Information to an Unauthorized Actor in Requests
Affected:
<2.3.0
Fixed in:
2.3.0
Source:
OSV source · Advisory
CVE-2014-1830GHSA-652x-xj99-gmcc
Exposure of Sensitive Information to an Unauthorized Actor in Requests
Affected:
<2.3.0
Fixed in:
2.3.0
Source:
OSV source · Advisory
CVE-2015-2296GHSA-pg2w-x9wp-vw92
Python Requests Session Fixation
Affected:
>=2.1.0,<2.6.0
Fixed in:
2.6.0
Source:
OSV source · Advisory
CVE-2018-18074GHSA-x84v-xcm2-53pg
Insufficiently Protected Credentials in Requests
Affected:
<2.20.0
Fixed in:
2.20.0
Source:
OSV source · Advisory
CVE-2018-18074PYSEC-2018-28
Affected:
<2.20.0
Fixed in:
2.20.0
Source:
OSV source · Advisory
CVE-2015-2296PYSEC-2015-17
Affected:
>=2.1.0,<2.6.0
Fixed in:
2.6.0
Source:
OSV source · Advisory
CVE-2014-1829PYSEC-2014-13
Affected:
<2.3.0
Fixed in:
2.3.0
Source:
OSV source · Advisory

Latest release

2.34.2

Released 14 May 2026 · stable

https://pypi.org/pypi/requests/2.34.2/json

Previous releases

2.34.1
13 May 2026
2.34.0
11 May 2026
2.33.1
30 Mar 2026

Release history

83 concrete releases tracked for this line.

Version	Release date	Channel	Source
2.4.1	9 Sept 2014	stable	Source
2.4.0	29 Aug 2014	stable	Source
2.3.0	16 May 2014	stable	Source
2.2.1	23 Jan 2014	stable	Source
2.2.0	9 Jan 2014	stable	Source
2.1.0	5 Dec 2013	stable	Source
2.0.1	15 Nov 2013	stable	Source
2.0.0	15 Nov 2013	stable	Source

Release activity

Total releases: 83
Last 30 days: 0
Last 90 days: 0
Avg. interval: ~84 days
Most recent: 14 May 2026

Should I use this version?

Lifecycle status unclear

Requests 2 has no published vendor calendar support schedule. CompatHub does not invent support commitments from release history alone.

Version comparison

Compact comparison against the nearest relevant release lines.

	2	1
Status	unknown	unknown
Latest release	2.34.2	1.2.3
EOL	Not published	Not published
Risk	medium	medium

Compatibility

Evidence-backed compatibility results involving Requests 2. Only combinations CompatHub can evaluate from upstream sources are listed.

Compatible targets

Open Compatibility Explorer →

Sources

Where this information comes from.

Lifecycle sources

Requests PyPI releasesfirst party · high confidence
Official source: https://pypi.org/project/requests/
Last verified 2 Sept 2026
OSV.devfirst party
Official source: https://osv.dev
Verification time not recorded
NVD (NIST)first party
Official source: https://nvd.nist.gov
Verification time not recorded
CISA Known Exploited Vulnerabilitiesfirst party
Official source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Verification time not recorded

Release sources

Requests PyPI releasesfirst party · high confidence
Official source: https://pypi.org/project/requests/
Last verified 2 Sept 2026

Data coverage

Last checked = last successful upstream check. Latest source update = when upstream content last changed.

Releases tracked: 83
Lifecycle periods: 1
EOL: Not officially published
Provenance records: 2
Data last checked: 2 Sept 2026
Latest source update: 2 Sept 2026

EOL: Not officially published

Other Requests versions

Previous
Requests 1
unknown