<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 02 Oct 2026 20:09:43 +0000</lastBuildDate>
    <item>
      <title>CVE-2023-0055 — Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in pyload/pyload</title>
      <link>https://cve.radiocsirt.org/vuln/cve-2023-0055</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; pyload/pyload&lt;/p&gt;
&lt;p&gt;Sensitive Cookie in HTTPS Session Without &amp;#39;Secure&amp;#39; Attribute in GitHub repository pyload/pyload prior to 0.5.0b3.dev32.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; pyload/pyload&lt;/p&gt;
&lt;p&gt;Sensitive Cookie in HTTPS Session Without &amp;#39;Secure&amp;#39; Attribute in GitHub repository pyload/pyload prior to 0.5.0b3.dev32.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cve-2023-0055</guid>
    </item>
    <item>
      <title>GHSA-m3g7-wrrq-v5c8 — Pyload contains Sensitive Cookie in HTTPS Session Without 'Secure' Attribute</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-m3g7-wrrq-v5c8</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; PyPI: pyload-ng&lt;/p&gt;
&lt;p&gt;Sensitive Cookie in HTTPS Session Without &amp;#39;Secure&amp;#39; Attribute in GitHub repository pyload/pyload prior to 0.5.0b3.dev32. The Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the user agent to send those cookies in plaintext over an HTTP session. This issue is patched in version 0.5.0b3.dev32.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; PyPI: pyload-ng&lt;/p&gt;
&lt;p&gt;Sensitive Cookie in HTTPS Session Without &amp;#39;Secure&amp;#39; Attribute in GitHub repository pyload/pyload prior to 0.5.0b3.dev32. The Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the user agent to send those cookies in plaintext over an HTTP session. This issue is patched in version 0.5.0b3.dev32.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-m3g7-wrrq-v5c8</guid>
    </item>
  </channel>
</rss>
