AIOHTTP: Secure attribute not enforced for shared cookie

Mô tả

Tham khảo

• aio-libs/aiohttp security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-111063 · ADVISORY
• aio-libs/aiohttp commit 999c356 · WEB
• aio-libs/aiohttp · PACKAGE
• aio-libs/aiohttp release v3.14.4 · WEB

Lỗ hổng khác của aiohttp

• CVE-2026-111750TRUNG BÌNH 6.3AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the pure Python parser accepts ambiguous HT…
• CVE-2026-111749THẤP 2.3AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Host-Only scope on an existing parent-domai…
• CVE-2026-111748TRUNG BÌNH 6.3AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, an attacker can send an absolute-form reque…
• CVE-2026-111066CAO 8.2AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. From 2.0.0 until 3.14.4, multipart request processing can re…
• CVE-2026-111065TRUNG BÌNH 6.9AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Max-Age processing can overflow and skip cl…