Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 10:06:11 +0000 CVE-2022-3174 — Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb https://cve.radiocsirt.org/vuln/cve-2022-3174 <p><strong>Affected:</strong> ikus060/rdiffweb</p> <p>Sensitive Cookie in HTTPS Session Without &#39;Secure&#39; Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2.</p> <p><strong>Affected:</strong> ikus060/rdiffweb</p> <p>Sensitive Cookie in HTTPS Session Without &#39;Secure&#39; Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2.</p> https://cve.radiocsirt.org/vuln/cve-2022-3174 GHSA-mjw4-xvx6-3grg — rdiffweb vulnerable to Sensitive Cookie in HTTPS Session Without 'Secure' Attribute https://cve.radiocsirt.org/vuln/ghsa-mjw4-xvx6-3grg <p><strong>Affected:</strong> PyPI: rdiffweb</p> <p>rdiffweb version 2.4.1 is vulnerable to Sensitive Cookie in HTTPS Session Without &#39;Secure&#39; Attribute. This makes it so that a user&#39;s cookies can be sent to the server with an unencrypted request over the HTTP protocol. Version 2.4.2 contains a fix for the issue.</p> <p><strong>Affected:</strong> PyPI: rdiffweb</p> <p>rdiffweb version 2.4.1 is vulnerable to Sensitive Cookie in HTTPS Session Without &#39;Secure&#39; Attribute. This makes it so that a user&#39;s cookies can be sent to the server with an unencrypted request over the HTTP protocol. Version 2.4.2 contains a fix for the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-mjw4-xvx6-3grg