Skip to content

Move DigestAuth hash algorithms to use usedforsecurity=False #7310

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
nateprewitt wants to merge 1 commit into
base: main
Choose a base branch
from
+5 −5

Move DigestAuth hash algorithms to use usedforsecurity=False

53a8c79
Select commit
Loading
Failed to load commit list.
Open

Move DigestAuth hash algorithms to use usedforsecurity=False #7310

Move DigestAuth hash algorithms to use usedforsecurity=False
53a8c79
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL succeeded Mar 30, 2026 in 4s

No new alerts in code changed by this pull request

View all branch alerts.

Annotations

Check failure on line 148 in src/requests/auth.py

See this annotation in the file changed.

Code scanning / CodeQL

Use of a broken or weak cryptographic hashing algorithm on sensitive data High

Sensitive data (password)
Loading
is used in a hashing algorithm (MD5) that is insecure for password hashing, since it is not a computationally expensive hash function.
Sensitive data (id)
Loading
is used in a hashing algorithm (MD5) that is insecure.

Check failure on line 156 in src/requests/auth.py

See this annotation in the file changed.

Code scanning / CodeQL

Use of a broken or weak cryptographic hashing algorithm on sensitive data High

Sensitive data (password)
Loading
is used in a hashing algorithm (SHA1) that is insecure for password hashing, since it is not a computationally expensive hash function.
Sensitive data (id)
Loading
is used in a hashing algorithm (SHA1) that is insecure.

Check failure on line 164 in src/requests/auth.py

See this annotation in the file changed.

Code scanning / CodeQL

Use of a broken or weak cryptographic hashing algorithm on sensitive data High

Sensitive data (password)
Loading
is used in a hashing algorithm (SHA256) that is insecure for password hashing, since it is not a computationally expensive hash function.

Check failure on line 172 in src/requests/auth.py

See this annotation in the file changed.

Code scanning / CodeQL

Use of a broken or weak cryptographic hashing algorithm on sensitive data High

Sensitive data (password)
Loading
is used in a hashing algorithm (SHA512) that is insecure for password hashing, since it is not a computationally expensive hash function.