PT-2026-32132 · Pypi · Poetry-Plugin-Tweak-Dependencies-Version

Published 2026-04-01 · Updated 2026-04-01

OSV

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N

Pin vulnerable version of requests library

Fix

Weakness Enumeration

CWE-377

Related Identifiers

GHSA-5QVP-PR9F-2G2V

Affected Products

Poetry-Plugin-Tweak-Dependencies-Version

References · 6

• https://osv.dev/vulnerability/GHSA-5qvp-pr9f-2g2v · Vendor Advisory
• https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2 · Note
• https://github.com/sbrunner/poetry-plugin-tweak-dependencies-version/commit/54b5784d89f36cd413a8bc5032ab0a96438dcae3 · Note
• https://github.com/sbrunner/poetry-plugin-tweak-dependencies-version/security/advisories/GHSA-5qvp-pr9f-2g2v · Note
• https://github.com/sbrunner/poetry-plugin-tweak-dependencies-version · Note
• https://github.com/sbrunner/poetry-plugin-tweak-dependencies-version/releases/tag/1.5.6 · Note