Aio-Libs Aiohttp Session
2 CVEs affecting Aio-Libs Aiohttp Session. Latest disclosed: 2018-12-20. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-1000814 | Medium | 6.5 | 2018-12-20 | aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability in EncryptedCookieStorage and NaClCookieStorage that can result in No… |
CVE-2018-1000519 | Medium | 6.5 | 2018-06-26 | aio-libs aiohttp-session contains a Session Fixation vulnerability in load_session function for RedisStorage (see: https://github.com/aio-libs/aiohttp-session/… |