Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 9 | python-treq | 15.1.0-1+deb9u1 |
Vulnerabilities 1
-
Medium 6.5
Unsafe handling of user-specified cookies in treq
treq is an HTTP library inspired by requests but written on top of Twisted's Agents. Treq's request methods (`treq.get`, `treq.post`, etc.) and `treq.client.HTTPClient` constructor accept cookies as a dictionary. Such cookies are not bound to a single domain,…