# CVEs published 2019-07-13

2 CVEs were published on July 13, 2019: 0 critical, 1 high. Days are UTC.

- [CVE-2018-20852](https://cve.now/CVE-2018-20852.md): http.cookiejar.DefaultPolicy.domain\_return\_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can (CVSS 4.3)
- [CVE-2019-5629](https://cve.now/CVE-2019-5629.md): Rapid7 Insight Agent, version 2.6.3 and prior, suffers from a local privilege escalation due to an uncontrolled DLL search path. (CVSS 7.8, Rapid7 Insight Agent)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-07-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.