[BUG]Reachable Construct Detected in requests==2.21

[wangyueq0101]

Summary

A reachable construct was detected in requests==2.21 through my static analysis database. The analysis uncovered more than 15 call chains leading to this construct. Below is one example to illustrate the potential vulnerability:

Call Chain Analysis

varken.radarr.RadarrAPI.get_queue
└── calls varken.helpers.connection_handler
└── calls requests.sessions.Session.send
└── calls requests.sessions.SessionRedirectMixin.resolve_redirects
└── calls requests.sessions.SessionRedirectMixin.rebuild_proxies

Patch and Code Changes

This construct might be vulnerable because it was modified in a security-related patch. The original version (requests==2.21) may still pose risks and warrants further investigation.

Note:

This issue was identified through a static analysis of the project at commit [ec79d22].