CVE-2024-47833
Session Cookie without Secure and HTTPOnly flags in taipy
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Session Cookie without Secure and HTTPOnly flags in taipy
Taipy is an open-source Python library for easy, end-to-end application development for data scientists and machine learning engineers. In affected versions session cookies are served without Secure and HTTPOnly flags. This issue has been addressed in release version 4.0.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
Reserved 2024-10-03 | Published 2024-10-09 | Updated 2024-10-09 | Assigner GitHub_MCWE-614: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CWE-1004: Sensitive Cookie Without 'HttpOnly' Flag
github.com/.../taipy/security/advisories/GHSA-r3jq-4r5c-j9hp
Support options
