fix: Update requests dependency to address security vulnerability CVE-2024-47081 #366
Description
Description
Update the requests library from version 2.32.3 to 2.32.4 to address a critical security vulnerability and improve the overall security posture of the scapy-containerised project.
Problem
The current version of the requests library (2.32.3) contains a security vulnerability CVE-2024-47081 that allows maliciously crafted URLs in trusted environments to retrieve credentials for the wrong hostname/machine from a netrc file.
Solution
Upgrade the requests dependency to version 2.32.4 which includes:
Security Fixes:
- CVE-2024-47081: Fixed credential retrieval issue from netrc files with maliciously crafted URLs
Improvements:
- Numerous documentation improvements
- Added support for PyPy 3.11 for Linux and macOS
- Dropped support for PyPy 3.9 (end of support)
Impact
This update enhances the security of the containerised Scapy environment by preventing potential credential leakage scenarios when processing untrusted network requests.