[Cycode] Fix for vulnerable manifest file dependency - requests updated to version 2.32.0

[cycode-security]

Cycode Vulnerable Dependencies Update

This pull request updates the following manifest file:

File Path	Number of packages to update
gitea/repositories/white-rabbit/docs/requirements.txt	1

📂 gitea/repositories/white-rabbit/docs/requirements.txt

1 package will be updated to resolve vulnerabilities:

Package Name	Current Version	Updated Version
requests	2.15.1	2.32.0

[cycode-security]

❗Cycode: Security vulnerability found in newly introduced dependency.

Severity	Medium
Issue	Requests vulnerable to .netrc credentials leak via malicious URLs: CVE-2024-47081
Ecosystem	PyPI
Dependency	requests
Dependency Paths	requests 2.32.0
Direct Dependency	Yes
Upgrade	2.32.4

Impact

Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs.

Workarounds

For older versions of Requests, use of the .netrc file can be disabled with trust_env=False on your Requests Session (docs).

References

psf/requests#6965
https://seclists.org/fulldisclosure/2025/Jun/2

Description

Detects when new vulnerabilities affect your dependencies.

Tell us how you wish to proceed using one of the following commands:

Tag	Short Description
#cycode_ignore_manifest_here <reason>	Applies to this manifest in this request only
#cycode_ignore_package_everywhere <reason>	Applies to this manifest for this package for all requests in your repository
#cycode_ignore_package_here <reason>	Applies to this manifest for this package in this request only
#cycode_vulnerable_package_fix_this_violation	Fix this violation via a commit to this branch

⚠️ When commenting on Github, you may need to refresh the page to see the latest updates.