Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2022-3250

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-m748-hjqg-rpp8

rdiffweb has insecure HTTP cookies In rdiffweb prior to version 2.4.6, the `cookie` session_id does not have a secure attribute when the URL is invalid. Version 2.4.6 contains a fix for the issue.

gitlab/pypi/rdiffweb/CVE-2022-3250

rdiffweb has insecure HTTP cookies In rdiffweb prior to version 2.4.6, the `cookie` session_id does not have a secure attribute when the URL is invalid. Version 2.4.6 contains a fix for the issue.

pypa/rdiffweb/PYSEC-2022-287

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.6.

pysec/PYSEC-2022-287

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.6.