Login Request a demo
AS
Product
Aiohttp Session
by Aio-libs · last CVE Dec 20, 2018
2
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 0Medium 2Low 0
Severity
All severities2Critical0High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Aiohttp Session to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-1000814
6.5
1%
Dec 20
aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability in EncryptedCookieStorage and NaClCookieStorage that can result in Non-expiring sessions…
Affected: through 2.6.0
CVE-2018-1000519
6.5
1%
Jun 26
aio-libs aiohttp-session contains a Session Fixation vulnerability in load_session function for RedisStorage (see:…
Affected: before 2.4.0
Showing 2