5557185732
The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
19 lines
293 B
Plaintext
19 lines
293 B
Plaintext
certifi==2017.4.17
|
|
chardet==3.0.4
|
|
click==6.7
|
|
enum-compat==0.0.2
|
|
enum34==1.1.6
|
|
eventlet==0.21.0
|
|
Flask==0.12.2
|
|
greenlet==0.4.12
|
|
idna==2.5
|
|
itsdangerous==0.24
|
|
Jinja2==2.9.6
|
|
MarkupSafe==1.0
|
|
python-engineio==1.7.0
|
|
python-socketio==1.7.6
|
|
requests>=2.20.0
|
|
six==1.10.0
|
|
urllib3==1.21.1
|
|
Werkzeug==0.12.2
|