Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 20:10:48 +0000 BREW-black-CVE-2026-111063 — AIOHTTP: Secure attribute not enforced for shared cookie https://db.gcve.eu/vuln/brew-black-cve-2026-111063 <p><strong>Affected:</strong> Homebrew: black</p> <p>### Summary</p> <p>The Secure attribute was not being enforced for the shared cookie.</p> <p>### Impact</p> <p>It may be possible to send a shared cookie marked Secure through an unencrypted request.</p> <p><strong>Affected:</strong> Homebrew: black</p> <p>### Summary</p> <p>The Secure attribute was not being enforced for the shared cookie.</p> <p>### Impact</p> <p>It may be possible to send a shared cookie marked Secure through an unencrypted request.</p> https://db.gcve.eu/vuln/brew-black-cve-2026-111063 CVE-2026-111063 — AIOHTTP: Secure attribute not enforced for shared cookie https://db.gcve.eu/vuln/cve-2026-111063 <p><strong>Affected:</strong> aio-libs aiohttp</p> <p>AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a shared cookie is not enforced. An attacker can consequently cause a shared cookie marked Secure to be sent with an unencrypted request. This issue is fixed in version 3.14.4.</p> <p><strong>Affected:</strong> aio-libs aiohttp</p> <p>AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a shared cookie is not enforced. An attacker can consequently cause a shared cookie marked Secure to be sent with an unencrypted request. This issue is fixed in version 3.14.4.</p> https://db.gcve.eu/vuln/cve-2026-111063