Threats tagged 'brew-icloudpd-cve-2024-35195'

A vulnerability in icloudpd versions 1.17.3 through 1.25.0 causes the requests.Session object to persist TLS certificate verification settings from the first request. If the first request to an origin disables verification (verify=False), subsequent requests to that origin may also skip verification even if explicitly enabled, risking man-in-the-middle attacks. This issue is fixed in version 1.25.1.