CVE-2024-35195: Requests `Session` object does not verify requests after making first request with verify=False
When making requests through a Requests Session
, if the first request is made with verify=False
to disable cert verification, all subsequent requests to the same origin will continue to ignore cert verification regardless of changes to the value of verify
. This behavior will continue for the lifecycle of the connection in the connection pool.
References
Detect and mitigate CVE-2024-35195 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →