p PatchFirst

CVE-2024-47833

CVE-2024-47833 · Session Cookie without Secure and HTTPOnly flags in taipy

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Taipy is an open-source Python library for easy, end-to-end application development for data scientists and machine learning engineers. In affected versions session cookies are served without Secure and HTTPOnly flags. This issue has been addressed in release version 4.0.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS 6.3 · Medium · EPSS 0.3% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • taipy

    Versions
    • < 4.0.0: Affected

    No fix published

  • taipy PyPI

    Versions
    • 1.0.0
    • 1.1.0
    • 2.0.0
    • 2.1.0
    • 2.2.0
    • 2.3.0
    • 2.3.1
    • 2.4.0
    • 3.0.0
    • 3.1.0
    • 3.1.1
    Affected ranges
    • ECOSYSTEM: < 4.0.0

    Update to 4.0.0

Original sources

Check your server →