From db79e7a512fc814fe4de84b8d3fad0954de970e0 Mon Sep 17 00:00:00 2001 From: iamrobertmorrison01-stack Date: Tue, 20 Oct 2026 05:39:46 +0100 Subject: [PATCH] Improve GHSA-494j-54xm-rwp3 --- .../2026/10/GHSA-494j-54xm-rwp3/GHSA-494j-54xm-rwp3.json | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/advisories/github-reviewed/2026/10/GHSA-494j-54xm-rwp3/GHSA-494j-54xm-rwp3.json b/advisories/github-reviewed/2026/10/GHSA-494j-54xm-rwp3/GHSA-494j-54xm-rwp3.json index 51c9b1493e3..1ce99467fc4 100644 --- a/advisories/github-reviewed/2026/10/GHSA-494j-54xm-rwp3/GHSA-494j-54xm-rwp3.json +++ b/advisories/github-reviewed/2026/10/GHSA-494j-54xm-rwp3/GHSA-494j-54xm-rwp3.json @@ -1,14 +1,19 @@ { "schema_version": "1.4.0", "id": "GHSA-494j-54xm-rwp3", - "modified": "2026-10-19T17:07:47Z", + "modified": "2026-10-19T17:07:48Z", "published": "2026-10-19T17:07:47Z", "aliases": [ "CVE-2026-111063" ], "summary": "AIOHTTP: Secure attribute not enforced for shared cookie", "details": "### Summary\n\nThe Secure attribute was not being enforced for the shared cookie.\n\n### Impact\n\nIt may be possible to send a shared cookie marked Secure through an unencrypted request.", - "severity": [], + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N" + } + ], "affected": [ { "package": {