{"action":"Upgrade emmett-core to 1.3.11 or later.","affected":[{"fixed":"1.3.11","introduced":"0"}],"component":"emmett-core","cve_ids":["CVE-2026-25577"],"ecosystem":"PyPI","epss":0.00311,"exploited":false,"fixed_versions":["1.3.11"],"ghsa_id":"GHSA-x6cr-mq53-cc76","id":"tcs_01M5KGZNR60T0SMB263E78B8PZ","modified_at":"2026-07-13T16:31:46.093031049Z","published_at":"2026-07-13T14:36:35.814650Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2469","https://github.com/emmett-framework/core/security/advisories/GHSA-x6cr-mq53-cc76","https://nvd.nist.gov/vuln/detail/CVE-2026-25577","https://github.com/emmett-framework/core/commit/9557ea23a27cbadf7774d8bca6bbe4b54fa8a3ec","https://github.com/emmett-framework/core/commit/c126757133e118119a280b58f3bb345b1c9a8a2a","https://github.com/emmett-framework/core","https://pypi.org/project/emmett-core","https://github.com/advisories/GHSA-x6cr-mq53-cc76"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-2469","url":"https://osv.dev/vulnerability/PYSEC-2026-2469"}],"summary":"Emmett-Core: Unhandled CookieError Exception Causing Denial of Service"}