AZL-113807
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-113807.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-113807
- Upstream
- Published
- 2026-11-12T17:17:44Z
- Modified
- 2026-11-13T14:15:11Z
- Summary
- CVE-2026-16052 affecting package python-py 1.11.0-1
- Details
-
The http.cookies.Morsel class allows separator semicolons in attribute values and includes them verbatim in all output formats. An attacker who can control these values could use this to relax the cookie's Domain or SameSite restrictions.
- References