Description (CNA)
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, host-only cookies that are saved with CookieJar.save() and then restored later with CookieJar.load() lose their host-only status. This vulnerability is fixed in 3.14.1.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| aio-libs / aiohttp | affected < 3.14.1 |
CWE
CWE-665
References
- https://github.com/aio-libs/aiohttp/security/advisories/GHSA-2fqr-mr3j-6wp8
- https://github.com/aio-libs/aiohttp/commit/a329a7aacad5284f087af36103aff778746da0f2
ADP enrichment
No English description supplied.
No references supplied.