CVE-2017-16026

Name of the Vulnerable Software and Affected Versions: Request versions 2.2.6 through 2.46.9 Request versions 2.51.0 through 2.67.0

Description: The issue affects the Request library when a multipart request is made and the body type is a number. In such cases, a buffer of the specified size is allocated and sent to the remote server as the body, potentially disclosing local system memory to remote systems.

Recommendations: For Request versions 2.2.6 through 2.46.9, update to version 2.68.0 or later. For Request versions 2.51.0 through 2.67.0, update to version 2.68.0 or later.