p PatchFirst

CVE-2026-25577

CVE-2026-25577 · Emmett has an Unhandled CookieError Exception Causing Denial of Service

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Emmett is a framework designed to simplify your development process. Prior to 1.3.11, the cookies property in mmett_core.http.wrappers.Request does not handle CookieError exceptions when parsing malformed Cookie headers. This allows unauthenticated attackers to trigger HTTP 500 errors and cause denial of service. This vulnerability is fixed in 1.3.11.

CVSS 7.5 · High · EPSS 0.3% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • core

    Versions
    • < 1.3.11: Affected

    No fix published

  • emmett-core PyPI

    Versions
    • 1.0.0
    • 1.0.1
    • 1.0.2
    • 1.0.3
    • 1.0.4
    • 1.0.5
    • 1.1.0
    • 1.2.0
    • 1.3.0
    • 1.3.1
    • 1.3.10
    • 1.3.2
    • 1.3.3
    • 1.3.4
    • 1.3.5
    • 1.3.6
    • 1.3.7
    • 1.3.8
    • 1.3.9
    Affected ranges
    • ECOSYSTEM: < 1.3.11

    Update to 1.3.11

Original sources

Check your server →