{"action":"Upgrade emmett-core to 1.3.11 or later.","affected":[{"fixed":"1.3.11","introduced":"0"}],"component":"emmett-core","cve_ids":["CVE-2026-25577"],"ecosystem":"PyPI","epss":0.00311,"exploited":false,"fixed_versions":["1.3.11"],"ghsa_id":"GHSA-x6cr-mq53-cc76","id":"tcs_01M5KG3KPZPJW3NPWMSHE81M6K","modified_at":"2026-07-13T16:43:32.287421547Z","published_at":"2026-02-10T14:33:15Z","references":["https://osv.dev/vulnerability/GHSA-x6cr-mq53-cc76","https://github.com/emmett-framework/core/security/advisories/GHSA-x6cr-mq53-cc76","https://nvd.nist.gov/vuln/detail/CVE-2026-25577","https://github.com/emmett-framework/core/commit/9557ea23a27cbadf7774d8bca6bbe4b54fa8a3ec","https://github.com/emmett-framework/core/commit/c126757133e118119a280b58f3bb345b1c9a8a2a","https://github.com/emmett-framework/core"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-x6cr-mq53-cc76","url":"https://osv.dev/vulnerability/GHSA-x6cr-mq53-cc76"}],"summary":"Emmett-Core: Unhandled CookieError Exception Causing Denial of Service"}