https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 15:17:37 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-12264 cnvd-2018-12264 https://cve.radiocsirt.org/vuln/cnvd-2018-12264 https://cve.radiocsirt.org/vuln/euvd-2026-71162 EUVD-2026-71162 https://cve.radiocsirt.org/vuln/euvd-2026-71162 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000519 <p>aio-libs aiohttp-session contains a Session Fixation vulnerability in load_session function for RedisStorage (see: https://github.com/aio-libs/aiohttp-session/blob/master/aiohttp_session/redis_storage.py#L42) that can result in Session Hijacking. This attack appear to be exploitable via Any method that allows setting session cookies (?session=&lt;&gt;, or meta tags or script tags with Set-Cookie).</p> <p>aio-libs aiohttp-session contains a Session Fixation vulnerability in load_session function for RedisStorage (see: https://github.com/aio-libs/aiohttp-session/blob/master/aiohttp_session/redis_storage.py#L42) that can result in Session Hijacking. This attack appear to be exploitable via Any method that allows setting session cookies (?session=&lt;&gt;, or meta tags or script tags with Set-Cookie).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000519 https://cve.radiocsirt.org/vuln/ghsa-fpwp-69xv-c67f <p><strong>Affected:</strong> PyPI: aiohttp-session</p> <p>The pypi package aiohttp-session before 2.4.0 contained a Session Fixation vulnerability in `load_session` function for RedisStorage that can result in Session Hijacking. This attack appear to be exploitable via Any method that allows setting session cookies (`?session=&lt;&gt;`, or meta tags or script tags with Set-Cookie).</p> <p><strong>Affected:</strong> PyPI: aiohttp-session</p> <p>The pypi package aiohttp-session before 2.4.0 contained a Session Fixation vulnerability in `load_session` function for RedisStorage that can result in Session Hijacking. This attack appear to be exploitable via Any method that allows setting session cookies (`?session=&lt;&gt;`, or meta tags or script tags with Set-Cookie).</p> https://cve.radiocsirt.org/vuln/ghsa-fpwp-69xv-c67f https://cve.radiocsirt.org/vuln/gsd-2018-1000519 gsd-2018-1000519 https://cve.radiocsirt.org/vuln/gsd-2018-1000519 https://cve.radiocsirt.org/vuln/pysec-2018-80 <p><strong>Affected:</strong> PyPI: aiohttp-session</p> <p>aio-libs aiohttp-session contains a Session Fixation vulnerability in load_session function for RedisStorage (see: https://github.com/aio-libs/aiohttp-session/blob/master/aiohttp_session/redis_storage.py#L42) that can result in Session Hijacking. This attack appear to be exploitable via Any method that allows setting session cookies (?session=&lt;&gt;, or meta tags or script tags with Set-Cookie).</p> <p><strong>Affected:</strong> PyPI: aiohttp-session</p> <p>aio-libs aiohttp-session contains a Session Fixation vulnerability in load_session function for RedisStorage (see: https://github.com/aio-libs/aiohttp-session/blob/master/aiohttp_session/redis_storage.py#L42) that can result in Session Hijacking. This attack appear to be exploitable via Any method that allows setting session cookies (?session=&lt;&gt;, or meta tags or script tags with Set-Cookie).</p> https://cve.radiocsirt.org/vuln/pysec-2018-80