Improper Certificate Validation Affecting niquests package, versions [,3.15.0)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-PYTHON-NIQUESTS-14862286
- published5 Jan 2026
- disclosed1 Jan 2026
- creditUnknown
Introduced: 1 Jan 2026
CVE NOT AVAILABLE CWE-295 (opens in a new tab)Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Upgrade niquests to version 3.15.0 or higher.
Overview
niquests is a Niquests is a simple, yet elegant, HTTP library. It is a drop-in replacement for Requests, which is under feature freeze.
Affected versions of this package are vulnerable to Improper Certificate Validation due to missing OCSP response signature verification against the issuer's public key.