SEC.co
Emergency

By weakness (CWE)

CWE-665: related vulnerabilities

CVEs classified under CWE-665. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

Known exploited (KEV)CriticalHighMediumAll recent
  • CVE-2026-54279HIGH 7.5

    AIOHTTP, a popular Python framework for building asynchronous HTTP applications, has a cookie handling flaw. When the library saves and restores cookies from disk, it incorrectly forgets which cookies are marked as 'host-only'—a security attribute that restricts cookies to their originating domain. An attacker could exploit this loss of restriction to access or manipulate cookies that should have been tightly scoped, potentially leading to unauthorized actions across domains. The issue affects all versions before 3.14.1.