https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 21:29:59 +0000 https://vulnerability.circl.lu/vuln/cve-2015-2296 <p>The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a redirect.</p> <p>The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a redirect.</p> https://vulnerability.circl.lu/vuln/cve-2015-2296 https://vulnerability.circl.lu/vuln/ghsa-pg2w-x9wp-vw92 <p><strong>Affected:</strong> PyPI: requests</p> <p>The `resolve_redirects` function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a redirect.</p> <p><strong>Affected:</strong> PyPI: requests</p> <p>The `resolve_redirects` function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a redirect.</p> https://vulnerability.circl.lu/vuln/ghsa-pg2w-x9wp-vw92 https://vulnerability.circl.lu/vuln/pysec-2015-17 <p><strong>Affected:</strong> PyPI: requests</p> <p>The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a redirect.</p> <p><strong>Affected:</strong> PyPI: requests</p> <p>The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a redirect.</p> https://vulnerability.circl.lu/vuln/pysec-2015-17