CVE-2023-0055

CVE-2023-0055 affects the pyload/pyload project prior to version 0.5.0b3.dev32. The issue is leaking cookies in HTTPS sessions because the Secure attribute is not set on sensitive cookies, potentially allowing plaintext transmission. A fix is available in version 0.5.0b3.dev32. No exploitation de...

PT-2023-15974

Name of the Vulnerable Software and Affected Versions pyload/pyload versions prior to 0.5.0b3.dev32 Description The issue concerns a sensitive cookie in HTTPS sessions without the 'Secure' attribute set. This could cause the user agent to send those cookies in plaintext over an HTTP session...

CVE-2023-0055 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in pyload/pyload

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository pyload/pyload prior to 0.5.0b3.dev32...

Inefficient Regular Expression Complexity in pyload/pyload

✍️ Description The pyload package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide crafted HTML comments as input to the comments function of utils/web/purge.py may cause an application to consume an excessive amount of CPU. Below pinned line using...