-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
PythonPythonMiggo AIRoot Cause AnalysisThe vulnerability stems from missing Secure attribute on session cookies. The commit diff shows the fix was adding SESSION_COOKIE_SECURE configuration in the _configure_session method. This function directly controls cookie security attributes, and its pre-patch version failed to set the Secure flag despite the system supporting HTTPS, making it the root cause. The file path and function name are explicitly shown in the provided diff context.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| pyload-ng | pip | < 0.5.0b3.dev32 | 0.5.0b3.dev32 |
Ongoing coverage of React2Shell