CVE-2026-25645

Requests is a HTTP library. Prior to version 2.33.0, the "requests.utils.extractzippedpaths" utility function uses a predictable filename when extracting files from zip archives into the system temporary directory. If the target file already exists, it is reused without validation. A local attack...

CVE-2026-25645: Insecure Temporary File

Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filename when extracting files from zip archives into the system temporary directory. If the target file already exists, it is reused without validation. A local attacker...