BottlePy weak secret key
Description
BottlePy web application can store a user's data in a cookie. For protection against cookie data tampering, BottlePy signs the cookie value with a secret key. It's very important that an attacker doesn't know the value of this secret key. Your application is using a weak/known secret key and Invicti managed to guess this key.
Remediation
Change the value of secret to a long random string.