Medium DLA-3561-1 1 CVE

node-cookiejar - security update

Published Sep 11, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	node-cookiejar	2.0.1-1+deb10u1

Vulnerabilities 1

Medium 5.3

CVE-2022-25901

cookiejar Regular Expression Denial of Service via Cookie.parse function

Versions of the package cookiejar before 2.1.4 are vulnerable to Regular Expression Denial of Service (ReDoS) via the Cookie.parse function, which uses an insecure regular expression.

cookiejar org.webjars.npm:cookiejar node-cookiejar Debian npm Maven

Jan 18, 2023