## AIOHTTP: Secure attribute not enforced for shared cookie

- 種別: advisory
- 重大度: low
- 関連技術: python
- CVE: CVE-2026-111063
- 公開日時: 2026-10-19T17:07:47.000Z
- 情報源: GitHub Advisory Database (https://github.com/advisories/GHSA-494j-54xm-rwp3)
- パーマリンク: https://vulnpulse.app/items/ghsa-ghsa-494j-54xm-rwp3

影響: pip:aiohttp <= 3.14.3 → 3.14.4
Summary The Secure attribute was not being enforced for the shared cookie. Impact It may be possible to send a shared cookie marked Secure through an unencrypted request.