https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:06:26.731231+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-3174 CVE-2022-3174 — Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb 2026-10-04T10:06:26.732750+00:00

Affected: ikus060/rdiffweb

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2.

 https://cve.radiocsirt.org/vuln/ghsa-mjw4-xvx6-3grg GHSA-mjw4-xvx6-3grg — rdiffweb vulnerable to Sensitive Cookie in HTTPS Session Without 'Secure' Attribute 2026-10-04T10:06:26.732802+00:00

Affected: PyPI: rdiffweb

rdiffweb version 2.4.1 is vulnerable to Sensitive Cookie in HTTPS Session Without 'Secure' Attribute. This makes it so that a user's cookies can be sent to the server with an unencrypted request over the HTTP protocol. Version 2.4.2 contains a fix for the issue.