Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Emmett is a framework designed to simplify your development process. Prior to 1.3.11, the cookies property in mmett_core.http.wrappers.Request does not handle CookieError exceptions when parsing malformed Cookie headers. This allows unauthenticated attackers to trigger HTTP 500 errors and cause denial of service. This vulnerability is fixed in 1.3.11.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-10 | 1 | Disclosure1 |
| 2026-02-11 | 1 | General1 |
CVE-2026-25577 Emmett Framework Denial of Service via Malformed Cookie Header Parsing https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25577
Post summary
A short reference to a Denial of Service vulnerability in the Emmett Framework caused by malformed cookie header parsing, with no further details on PoC, exploitation, or remediation.
CVE-2026-25577: Crumbs in the Gearbox: Crashing Emmett Framework with Malformed Cookies A classic input validation oversight in the Emmett Python web framework allows unauthenticated attackers to trigger unhandled exceptions by sending malformed HTTP ... https://cvereports.com/reports/CVE-2026-25577
Post summary
The report discloses a classic input validation flaw in the Emmett Python framework that lets unauthenticated attackers trigger unhandled exceptions by sending malformed HTTP requests; no PoC, exploit, patch, or active exploitation details are provided.