Panagiks

The issue concerns a problem in EncryptedCookieStorage and NaClCookieStorage, which can lead to non-expiring sessions or infinite lifespan. This can be exploited by recreating a cookie post-expiry with the same value.

The issue concerns a Session Fixation vulnerability in the `load session` function for RedisStorage. This can result in Session Hijacking. The attack appears to be exploitable via any method that allows setting session cookies, such as `?session=<>` or meta tags and script tags with Set-Cookie.