https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-14T21:20:52.300888+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-16052 CVE-2026-16052 — Cookie Attribute Injection via Unescaped Semicolons in http.cookies.Morsel 2026-11-14T21:20:52.302175+00:00

Affected: Python Software Foundation CPython

The http.cookies.Morsel class allows separator semicolons in attribute values and includes them verbatim in all output formats. An attacker who can control these values could use this to relax the cookie's Domain or SameSite restrictions.