osv.query_version

curl "https://api.onekey.dev/v1/osv/query_version?name=requests&ecosystem=PyPI&version=2.19.0" \
  -H "x-api-key: YOUR_API_KEY"

{
  "success": true,
  "data": [
    {
      "content": {
        "id": "GHSA-9hjg-9r4m-mvj7",
        "title": "Requests vulnerable to .netrc credentials leak via malicious URLs",
        "text": "### Impact\n\nDue to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs.\n\n### Workarounds\nFor older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on your Requests Session ([docs](https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env)).\n\n### References\nhttps://github.com/psf/requests/pull/6965\nhttps://seclists.org/fulldisclosure/2025/Jun/2",
        "createdAt": "2025-06-09T19:06:08Z",
        "updatedAt": "2026-09-10T03:50:25Z"
      },
      "ext": {
        "aliases": [
          "CVE-2024-47081",
          "PYSEC-2026-1872"
        ]
      }
    },
    {
      "content": {
        "id": "GHSA-9wx4-h78v-vm56",
        "title": "Requests `Session` object does not verify requests after making first request with verify=False",
        "text": "When using a `requests.Session`, if the first request to a given origin is made with `verify=False`, TLS certificate verification may remain disabled for all subsequent requests to that origin, even if `verify=True` is explicitly specified later.\n\nThis occurs because the underlying connection is reused from the session's connection pool, causing the initial TLS verification setting to persist for the lifetime of the pooled connection. As a result, applications may unintentionally send requests without certificate verification, leading to potential man-in-the-middle attacks and compromised confidentiality or integrity.\n\nThis behavior affects versions of `requests` prior to 2.32.0.",
        "createdAt": "2024-05-20T20:15:00Z",
        "updatedAt": "2026-09-10T03:50:13Z"
      },
      "ext": {
        "aliases": [
          "CVE-2024-35195",
          "PYSEC-2026-1873"
        ]
      }
    }
  ],
  "metadata": {
    "platform": "osv",
    "endpoint": "query_version",
    "cached": false,
    "stale": false,
    "age_s": 0,
    "fetched_at": "2026-01-01T12:00:00+00:00",
    "credits_charged": 5,
    "request_id": "7f3a9c2e5b1d4c8fa2e6d0b9c4f18e37"
  },
  "error": null
}