Skip to content
OpenAdvisories

Package · Debian

node-cookie

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2024-47764

    cookie accepts cookie name, path, and domain with out of bounds characters

    cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter ot…

    jshttp cookie node-cookie cookie Debian Ubuntu npm