{"id":"ghsa-ghsa-494j-54xm-rwp3","seq":2437,"kind":"advisory","title":"AIOHTTP: Secure attribute not enforced for shared cookie","url":"https://github.com/advisories/GHSA-494j-54xm-rwp3","permalink":"https://vulnpulse.app/items/ghsa-ghsa-494j-54xm-rwp3","summary":"影響: pip:aiohttp <= 3.14.3 → 3.14.4\nSummary The Secure attribute was not being enforced for the shared cookie. Impact It may be possible to send a shared cookie marked Secure through an unencrypted request.","severity":"low","techs":["python"],"cves":["CVE-2026-111063"],"tags":["GHSA-494j-54xm-rwp3","aiohttp"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-19T17:07:47.000Z","fetched_at":"2026-10-21T16:17:46.637Z"}