emmett-framework core vulnerabilities

Latest emmett-framework core CVEs

Newest publication first

1. CVE-2026-25577 Emmett has an Unhandled CookieError Exception Causing Denial of Service

   Published 2026-02-10

   High·CVSS 7.5 EPSS 0.32%

   Emmett is a framework designed to simplify your development process. Prior to 1.3.11, the cookies property in mmett_core.http.wrappers.Request does not handle CookieError exceptions when parsing malformed Cookie headers. This allows unauthenticated attackers to trigger HTTP 500 e...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.