https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T15:33:13.191276+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-179190 EUVD-2026-179190 2026-10-08T15:33:13.197336+00:00 EUVD-2026-179190 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000814 fkie_cve-2018-1000814 2026-10-08T15:33:13.197477+00:00

aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability in EncryptedCookieStorage and NaClCookieStorage that can result in Non-expiring sessions / Infinite lifespan. This attack appear to be exploitable via Recreation of a cookie post-expiry with the same value.

 https://cve.radiocsirt.org/vuln/ghsa-mr4x-c4v9-x729 GHSA-mr4x-c4v9-x729 — aiohttp-session creates non-expiring sessions 2026-10-08T15:33:13.197638+00:00

Affected: PyPI: aiohttp-session

aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability in EncryptedCookieStorage and NaClCookieStorage that can result in Non-expiring sessions / Infinite lifespan. This attack appear to be exploitable via Recreation of a cookie post-expiry with the same value.

 https://cve.radiocsirt.org/vuln/gsd-2018-1000814 gsd-2018-1000814 2026-10-08T15:33:13.197731+00:00 gsd-2018-1000814 https://cve.radiocsirt.org/vuln/pysec-2018-35 PYSEC-2018-35 2026-10-08T15:33:13.197800+00:00

Affected: PyPI: aiohttp-session

aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability in EncryptedCookieStorage and NaClCookieStorage that can result in Non-expiring sessions / Infinite lifespan. This attack appear to be exploitable via Recreation of a cookie post-expiry with the same value.