Threats tagged 'brew-ansible-cve-2026-34518'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	2.7	EPSS 0.4%	CVE-2026-34518Ansible · AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect Low2.7EPSS 0.4%2026-08-13GCVE DatabaseCVE-2026-34518 ### Summary When following redirects to a different origin, aiohttp drops the Authorization header, but retains the Cookie and Proxy-Authorization headers. ### Impact The Cookie and Proxy-Authorizations headers could contain sensitive information which may be leaked to an unintended party after following a redirect. ----- Patch: https://github.com/aio-libs/aiohttp/commit/5351c980dcec7ad385730efdf4e1f4338b24fdb6 EPSS 0.4%Report on CVE-2026-34518 Vulnerability #brew-ansible-cve-2026-34518 #homebrew	GCVE Database	2026-08-13

Page 1 of 1