PT-2026-117996 · Pypi · Aiohttp

Published

2026-10-19

·

Updated

2026-10-19

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

Summary

The Secure attribute was not being enforced for the shared cookie.

Impact

It may be possible to send a shared cookie marked Secure through an unencrypted request.

Missing Encryption of Sensitive Data

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

GHSA-494J-54XM-RWP3

Affected Products

Aiohttp