https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 08:10:18 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-79313 <p>webpy web.py 0.76 is vulnerable to Insufficient Session Expiration. The application&#39;s session management relies on periodic cleanup to expire sessions instead of checking the last-access time when a session is loaded. As a result, an expired session whose record has not yet been cleaned up can still be replayed and used, allowing an attacker holding a previously valid session cookie to continue accessing protected resources after the configured idle timeout.</p> <p>webpy web.py 0.76 is vulnerable to Insufficient Session Expiration. The application&#39;s session management relies on periodic cleanup to expire sessions instead of checking the last-access time when a session is loaded. As a result, an expired session whose record has not yet been cleaned up can still be replayed and used, allowing an attacker holding a previously valid session cookie to continue accessing protected resources after the configured idle timeout.</p> https://db.gcve.eu/vuln/fkie_cve-2026-79313 https://db.gcve.eu/vuln/ghsa-qxcc-j254-vh2v <p>webpy web.py 0.76 is vulnerable to Insufficient Session Expiration. The application&#39;s session management relies on periodic cleanup to expire sessions instead of checking the last-access time when a session is loaded. As a result, an expired session whose record has not yet been cleaned up can still be replayed and used, allowing an attacker holding a previously valid session cookie to continue accessing protected resources after the configured idle timeout.</p> <p>webpy web.py 0.76 is vulnerable to Insufficient Session Expiration. The application&#39;s session management relies on periodic cleanup to expire sessions instead of checking the last-access time when a session is loaded. As a result, an expired session whose record has not yet been cleaned up can still be replayed and used, allowing an attacker holding a previously valid session cookie to continue accessing protected resources after the configured idle timeout.</p> https://db.gcve.eu/vuln/ghsa-qxcc-j254-vh2v https://db.gcve.eu/vuln/ubuntu-cve-2026-79313 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: webpy, Ubuntu:Pro:18.04:LTS: webpy, Ubuntu:Pro:20.04:LTS: webpy, Ubuntu:Pro:22.04:LTS: webpy, Ubuntu:Pro:24.04:LTS: webpy, Ubuntu:26.04:LTS: webpy</p> <p>webpy web.py 0.76 is vulnerable to Insufficient Session Expiration. The application&#39;s session management relies on periodic cleanup to expire sessions instead of checking the last-access time when a session is loaded. As a result, an expired session whose record has not yet been cleaned up can still be replayed and used, allowing an attacker holding a previously valid session cookie to continue accessing protected resources after the configured idle timeout.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: webpy, Ubuntu:Pro:18.04:LTS: webpy, Ubuntu:Pro:20.04:LTS: webpy, Ubuntu:Pro:22.04:LTS: webpy, Ubuntu:Pro:24.04:LTS: webpy, Ubuntu:26.04:LTS: webpy</p> <p>webpy web.py 0.76 is vulnerable to Insufficient Session Expiration. The application&#39;s session management relies on periodic cleanup to expire sessions instead of checking the last-access time when a session is loaded. As a result, an expired session whose record has not yet been cleaned up can still be replayed and used, allowing an attacker holding a previously valid session cookie to continue accessing protected resources after the configured idle timeout.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-79313