Skip to content
OpenAdvisories

Package · Debian

python-treq

1 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Feed

  • Medium 6.5
    CVE-2022-23607

    Unsafe handling of user-specified cookies in treq

    treq is an HTTP library inspired by requests but written on top of Twisted's Agents. Treq's request methods (`treq.get`, `treq.post`, etc.) and `treq.client.HTTPClient` constructor accept cookies as a dictionary. Such cookies are not bound to a single domain,…

    twisted treq python-treq python-treq Debian Ubuntu Alpine PyPI