Threats tagged 'ghsa-gx76-c99x-2c96'

1 threat

Threats tagged 'ghsa-gx76-c99x-2c96'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	2.3	EPSS 0.3%	CVE-2026-111749aiohttp · Reliance on Cookies without Validation and Integrity Checking Low2.3EPSS 0.3%2026-10-19CVE Database V5CVE-2026-111749 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Host-Only scope on an existing parent-domain cookie can be removed by a subdomain. A user who accesses an untrusted subdomain can consequently have host-only protections stripped from cookies, although impact is limited when applications do not reflect those cookies to a browser. This issue is fixed in version 3.14.4. EPSS 0.3%Vulnerability aio-libs #cwe-565 #ghsa-gx76-c99x-2c96 #pypi	CVE Database V5	2026-10-19

Showing 1–1 of 1 result