security: CVE-2023-32681: bump requests@2.31.0

miurahr / aqtinstall

aqt: Another (unofficial) Qt CLI Installer on multi-platforms

https://aqtinstall.readthedocs.io/en/latest/

MIT License

893 stars 83 forks source link

Closed miurahr closed 8 months ago

miurahr commented 8 months ago

Versions of Requests between v2.3.0 and v2.30.0 are vulnerable to potential forwarding of Proxy-Authorization headers to destination servers when following HTTPS redirects.