https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 14 Nov 2026 21:07:01 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-16052 <p>The http.cookies.Morsel class allows separator semicolons in attribute values and includes them verbatim in all output formats. An attacker who can control these values could use this to relax the cookie&#39;s Domain or SameSite restrictions.</p> <p>The http.cookies.Morsel class allows separator semicolons in attribute values and includes them verbatim in all output formats. An attacker who can control these values could use this to relax the cookie&#39;s Domain or SameSite restrictions.</p> https://db.gcve.eu/vuln/fkie_cve-2026-16052 https://db.gcve.eu/vuln/ghsa-x8gr-g883-r98g <p>The http.cookies.Morsel class allows separator semicolons in attribute values and includes them verbatim in all output formats. An attacker who can control these values could use this to relax the cookie&#39;s Domain or SameSite restrictions.</p> <p>The http.cookies.Morsel class allows separator semicolons in attribute values and includes them verbatim in all output formats. An attacker who can control these values could use this to relax the cookie&#39;s Domain or SameSite restrictions.</p> https://db.gcve.eu/vuln/ghsa-x8gr-g883-r98g https://db.gcve.eu/vuln/msrc_cve-2026-16052 msrc_CVE-2026-16052 https://db.gcve.eu/vuln/msrc_cve-2026-16052 https://db.gcve.eu/vuln/ubuntu-cve-2026-16052 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python2.7, Ubuntu:Pro:14.04:LTS: python3.4, Ubuntu:Pro:14.04:LTS: python3.5, Ubuntu:Pro:16.04:LTS: python2.7, Ubuntu:Pro:16.04:LTS: python3.5, Ubuntu:Pro:18.04:LTS: python2.7, Ubuntu:Pro:18.04:LTS: python3.6, Ubuntu:Pro:18.04:LTS: python3.7, Ubuntu:Pro:18.04:LTS: python3.8, Ubuntu:Pro:20.04:LTS: python3.8 and 8 more</p> <p>The http.cookies.Morsel class allows separator semicolons in attribute values and includes them verbatim in all output formats. An attacker who can control these values could use this to relax the cookie&#39;s Domain or SameSite restrictions.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python2.7, Ubuntu:Pro:14.04:LTS: python3.4, Ubuntu:Pro:14.04:LTS: python3.5, Ubuntu:Pro:16.04:LTS: python2.7, Ubuntu:Pro:16.04:LTS: python3.5, Ubuntu:Pro:18.04:LTS: python2.7, Ubuntu:Pro:18.04:LTS: python3.6, Ubuntu:Pro:18.04:LTS: python3.7, Ubuntu:Pro:18.04:LTS: python3.8, Ubuntu:Pro:20.04:LTS: python3.8 and 8 more</p> <p>The http.cookies.Morsel class allows separator semicolons in attribute values and includes them verbatim in all output formats. An attacker who can control these values could use this to relax the cookie&#39;s Domain or SameSite restrictions.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-16052