Daily security quiz #7
Question for 2026-11-07. Read the code and pick the most serious security vulnerability.
This code stores login state in a cookie and reads it back. What is the most serious vulnerability?
import base64, pickle
def save_session(resp, session: dict):
data = base64.b64encode(pickle.dumps(session)).decode()
resp.set_cookie("session", data)
def load_session(req) -> dict:
raw = req.cookies.get("session")
return pickle.loads(base64.b64decode(raw)) if raw else {}