CVE-2026-79313

A flaw was found in webpy. The application's session management relies on periodic cleanup to expire sessions instead of checking the last-access time when a session is loaded. This allows an attacker holding a previously valid session cookie to replay and use an expired session. As a result, an...