-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
PythonPythonMiggo AIRoot Cause AnalysisThe vulnerability stemmed from cookie security attributes not being applied during error handling. The commit moved security header logic from a HandlerTool class to a simpler Tool that executes earlier ('before_request_body'), ensuring cookie attributes are set even when HTTP errors occur. The added test cases specifically validate Secure attribute presence on error responses, confirming the original implementation's gap in error handling paths.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| rdiffweb | pip | < 2.4.6 | 2.4.6 |
Ongoing coverage of React2Shell