{
  "@id": "urn:uuid:2e7ea801-9b30-4b17-916b-3c8957ffd20c",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 4,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-29T21:35:58.653636+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:pypi/requests@2.31.0.post2+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/requests@2.31.0.post2+tuxcare"
          }
        }
      ],
      "timestamp": "2026-10-29T21:35:58.653636+00:00",
      "status_notes": "Vulnerability CVE-2023-32681 does not affect version 2.31.0.post2+tuxcare of requests. not_affected \u2014 The target (requests 2.31.0.post3+tuxcare) is NOT AFFECTED by CVE-2023-32681. The vulnerability pattern that leaked Proxy-Authorization headers to HTTPS destination servers is not present in the target code. The fix was shipped in the upstream requests v2.31.0 release (commit 74ea7cf7) authored by Nate Prewitt, which predates all TuxCare modifications to this version branch. The fix prevents ad...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2023-32681"
      },
      "impact_statement": "not_affected \u2014 The target (requests 2.31.0.post3+tuxcare) is NOT AFFECTED by CVE-2023-32681. The vulnerability pattern that leaked Proxy-Authorization headers to HTTPS destination servers is not present in the target code. The fix was shipped in the upstream requests v2.31.0 release (commit 74ea7cf7) authored by Nate Prewitt, which predates all TuxCare modifications to this version branch. The fix prevents ad..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/requests@2.31.0.post2+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/requests@2.31.0.post2+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T14:43:41.647513+00:00",
      "status_notes": "Vulnerability CVE-2024-35195 affects version 2.31.0.post2+tuxcare of requests, and is fixed in 2.31.0.post3+tuxcare.",
      "vulnerability": {
        "name": "CVE-2024-35195"
      },
      "action_statement": "Vulnerability CVE-2024-35195 affects version 2.31.0.post2+tuxcare of requests, and is fixed in 2.31.0.post3+tuxcare."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:pypi/requests@2.31.0.post2+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/requests@2.31.0.post2+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2024-47081 affects version 2.31.0.post2+tuxcare of requests, and is fixed in 2.31.0.post3+tuxcare.",
      "vulnerability": {
        "name": "CVE-2024-47081"
      },
      "action_statement": "Vulnerability CVE-2024-47081 affects version 2.31.0.post2+tuxcare of requests, and is fixed in 2.31.0.post3+tuxcare."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:pypi/requests@2.31.0.post2+tuxcare",
          "identifiers": {
            "purl": "pkg:pypi/requests@2.31.0.post2+tuxcare"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-25645 is fixed in version 2.31.0.post2+tuxcare of requests.",
      "vulnerability": {
        "name": "CVE-2026-25645"
      }
    }
  ]
}