Requests `Session` object does not verify requests after making first request with verify=False

🗓️ 07 Jul 2026 11:45:42Reported by Python Packaging AdvisoryType

pypa🔗 github.com👁 15 Views

First verify=False in a session may disable TLS for later requests to the same origin due to connection reuse.

Reporter	Title	Published	Views	Family All 317
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a security restrictions bypass in Psf Requests [CVE-2024-35195]	27 Feb 202515:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar EDR Software contains multiple vulnerabilities	8 Jul 202409:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - IoT uses multiple third party dependencies which is vulnerable to CVEs.	7 Apr 202519:17	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in MongoDB, Python, Node.js, Golang Go, Linux kernel affect IBM Spectrum Protect Plus	10 Mar 202620:52	–	ibm
IBM Security Bulletins	Security Bulletin:Requests SSL Verification Issue Fixed in 2.32.0	4 May 202612:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 1.15.0 IF001	31 Jul 202409:07	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability with Perl, Snappy, Psf Request, spring-web-5.3.33.jar , Apache HTTP Server, OpenJDK, affect IBM Cloud Object Storage Systems (July 2024v1)	12 Jul 202415:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple security vulnerabilities	30 Aug 202413:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to requests-2.31.0-py3-none-any.whl CVE-2024-35195	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: multiple vulnerabilities in IBM Spectrum Symphony with Requests and urlib3	23 Oct 202520:25	–	ibm

Vulners

Node

pypi requestsRange0–2.32.0

Source	Link
github	www.github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-35195
github	www.github.com/psf/requests/pull/6655
github	www.github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac
github	www.github.com/psf/requests
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/IYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/N7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ
pypi	www.pypi.org/project/requests
github	www.github.com/advisories/GHSA-9wx4-h78v-vm56

07 Jul 2026 17:25Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.15.6

EPSS0.0034

SSVC