python requests

Microsoft’s Security Update Guide now lists CVE-2026-25645, a medium-severity flaw in Python Requests before 2.33.0 where extract_zipped_paths() can reuse predictable temporary files, allowing a local attacker to substitute malicious content under specific environmental conditions. The...

The short answer is: No — Azure Linux is not necessarily the only Microsoft product that could include the vulnerable Requests library; it is, however, the only Microsoft product Microsoft has publicly attested (via its CSAF/VEX outputs) as including the implicated Python Requests package for...