diff --git a/backport-CVE-2024-1682.patch b/backport-CVE-2024-1682.patch
new file mode 100644
index 0000000000000000000000000000000000000000..e9c1785797c3cfba2cb39cedc175d1eb455822ff
--- /dev/null
+++ b/backport-CVE-2024-1682.patch
@@ -0,0 +1,40 @@
+From 6106a63eb6c0fa490efa73d44388ac25b1b08af4 Mon Sep 17 00:00:00 2001
+From: Nate Prewitt <nate.prewitt@gmail.com>
+Date: Tue, 20 Feb 2024 11:58:35 -0800
+Subject: [PATCH] Cleanup defunct links from community docs page
+
+Reference:https://github.com/psf/requests/commit/6106a63eb6c0fa490efa73d44388ac25b1b08af4
+Conflict:NA
+
+---
+ docs/community/out-there.rst | 14 +-------------
+ 1 file changed, 1 insertion(+), 13 deletions(-)
+
+diff --git a/docs/community/out-there.rst b/docs/community/out-there.rst
+index c33ab3c95b..c75c71f6a2 100644
+--- a/docs/community/out-there.rst
++++ b/docs/community/out-there.rst
+@@ -1,22 +1,10 @@
+ Integrations
+ ============
+ 
+-Python for iOS
+---------------
+-
+-Requests is built into the wonderful `Python for iOS <https://itunes.apple.com/us/app/python-2.7-for-ios/id485729872?mt=Python8>`_ runtime!
+-
+-To give it a try, simply::
+-
+-    import requests
+-
+-
+ Articles & Talks
+ ================
+-- `Python for the Web <https://www.gun.io/blog/python-for-the-web>`_ teaches how to use Python to interact with the web, using Requests.
+ - `Daniel Greenfeld's Review of Requests <https://pydanny.blogspot.com/2011/05/python-http-requests-for-humans.html>`_
+-- `My 'Python for Humans' talk <http://python-for-humans.heroku.com>`_ ( `audio <https://codeconf.s3.amazonaws.com/2011/pycodeconf/talks/PyCodeConf2011%20-%20Kenneth%20Reitz.m4a>`_ )
+-- `Issac Kelly's 'Consuming Web APIs' talk <https://issackelly.github.com/Consuming-Web-APIs-with-Python-Talk/slides/slides.html>`_
++- `Issac Kelly's 'Consuming Web APIs' talk <https://issackelly.github.io/Consuming-Web-APIs-with-Python-Talk/slides/slides.html>`_
+ - `Blog post about Requests via Yum <https://arunsag.wordpress.com/2011/08/17/new-package-python-requests-http-for-humans/>`_
+ - `Russian blog post introducing Requests <https://habr.com/post/126262/>`_
+ - `Sending JSON in Requests <http://www.coglib.com/~icordasc/blog/2014/11/sending-json-in-requests.html>`_
diff --git a/python-requests.spec b/python-requests.spec
index 251c455ed2546d7c8f6026ad7e7da2fe52d757f1..d38eb8ef9dae8a778135702c98e2b98b6c861ad3 100644
--- a/python-requests.spec
+++ b/python-requests.spec
@@ -2,12 +2,13 @@
 
 Name:           python-requests
 Version:        2.31.0
-Release:        1
+Release:        2
 Summary:        Python HTTP Library
 License:        ASL 2.0
 URL:            http://python-requests.org/
 Source0:        https://github.com/requests/requests/archive/v%{version}/requests-v%{version}.tar.gz#/requests-%{version}.tar.gz
 Patch6001:      backport-requests-2.31.0-system-certs.patch
+Patch6002:      backport-CVE-2024-1682.patch
 BuildArch:      noarch
 
 %description
@@ -92,6 +93,9 @@ PYTHONPATH=%{buildroot}%{python3_sitelib} %{__python3} -m pytest -v
 %doc HISTORY.md README.md
 
 %changelog
+* Mon Nov 18 2024 zhangpan <zhangpan103@h-partners.com> - 2.31.0-2
+- fix CVE-2024-1682
+
 * Thu Jul 13 2023 zhangchenglin <zhangchenglin@kylinos.cn> - 2.31.0-1
 - Update package to version 2.31.0