Search for packages
| purl | pkg:pypi/plone@3.1.7 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2026-732
Aliases: CVE-2008-1396 GHSA-hjp5-hv33-q58g |
Plone credentials stored in session cookie Plone CMS 3.1.x uses invariant data (a client username and a server secret) when … | There are no reported fixed by versions. |