{"action":"Upgrade rdiffweb to 2.4.2 or later.","affected":[{"fixed":"2.4.2","introduced":"0"}],"component":"rdiffweb","cve_ids":["CVE-2022-3174"],"ecosystem":"PyPI","epss":0.00706,"exploited":false,"fixed_versions":["2.4.2"],"ghsa_id":"GHSA-mjw4-xvx6-3grg","id":"tcs_01M5KGGX752T09GXEJ5YM378TG","modified_at":"2023-11-08T04:09:32.825654Z","published_at":"2022-09-13T10:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-271","https://huntr.dev/bounties/d8a32bd6-c76d-4140-a5ca-ef368a3058ce","https://github.com/ikus060/rdiffweb/commit/f2de2371c5e13ce1c6fd6f9a1ed3e5d46b93cd7e","https://github.com/advisories/GHSA-mjw4-xvx6-3grg"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-271","url":"https://osv.dev/vulnerability/PYSEC-2022-271"}],"summary":"Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2."}